We analyzed data from thousands of organizations to discover which vulnerabilities really matter, which threats present a risk, and other insights.