From a quick search, it seems that the attacks are either through direct access from the Internet, or by getting into the local network first, usually via an in

From a quick search, it seems that the attacks are either through direct access from the Internet, or by getting into the local network first, usually via an infected email/links to exploit patches, possibly even social engineering, if someone falls for it. Unless someone is aware of other avenues?