Cybersecurity professionals need to learn to expect the unexpected