If you have a vulnerable system accessible to the network, assume it’s going to be attacked.