79% of organizations are notified of a threat by external third parties such as researchers, customers, or attackers before their own internal detection.