10 lessons learned from cyber-attacks to improve IT security