Phishing remains a top initial access vector for cyberattacks, according to researchers at Cisco Talos.