Less harsh in hindsight --- I used to be extremely critical of governments and companies hit by cyberattacks until a few years back. I used to think it overwhelmingly was attributed to negligence on their part. To this day I'm still aware that there, indeed, is a great deal of negligence going on, but I'm also more understanding as I learned that even the best, most professional efforts and tools available in the market might still be insufficient. If you have a sufficiently interested and persistent attacker it might only be a matter of time before you become a victim. Mind you, companies and governments can still be made victims due to vulnerabilities (and negligence) in third party software they could never have anticipated. As I understand this now, I've become less harsh towards victims of large scale cyberattacks.

Source author: Gustavo Paiva gdp.direito@gmail.com