The Vulnerability Lurking in Your Inbox: Why 90% of Cyber Attacks Start with a Simple Email