Excellent post Andrew! Interesting insight from Cisco Talos: in recent years, the proportion of easily exploitable vulnerabilities in the global CVE database have reduced dramatically, making users (and therefore email) increasingly popular as a target. No doubt we can thank the rise of DevSecOps as a secular trend for this outcome!