Why has phishing decreased from nearly half of the total incidents in $2018$ to less than a third by $2019,$ while scanning and exploitation of vulnerabilities increased to nearly a third of the incidents up from only eight percent in $2018.$