Over 90% of successful cyberattacks begin with stolen or weak credentials.