Cyber attackers spent a median of 15 days inside victim networks last year: Sophos