From https://www.rsaconference.com/event...oitation-trends-from-potential-risk-to-actual: Some of this material was published at Microsoft's website previously, but some was not (as far as I know).