Don't "security venders" detect and report most of these types of attacks already today?