New cybersecurity reality: Attackers are winning