Cyberattacks targeting enterprises most often start on internet of things (IoT) endpoints, then move laterally across corporate networks to take control of identities and infrastructure.