Emails and web are the most vulnerable to a threat