What lessons can we learn from devastating NotPetya cyberattack?