New research from Proofpoint shows that the majority of cyberattacks are activated by users opening a file, clicking a link, or other types of action.