Insider attacks now more common than external hacks