What really happened at Sony Pictures during the cyberattack – and questions about whether the company should have seen it coming.