The government and it's contractors...with it's long RFC procurement process and associated bullshit will always be behind the security curve and will always be susceptible to these types of attacks as long as they favor a culture of old veteran people over competence.