Despite the multitude of anti-exploit mitigations built into modern operating systems (ASLR, DEP, Sandboxing), hackers were able to compromise every major target this year. This is confirmation that dedicated attackers with the right (financial) motivation, will almost always find a way to break into computer systems. It also highlights the difficulties businesses face when trying to thwart targeted attacks that combine zero-day vulnerabilities/exploits with clever social engineering lures. The dedicated targeted attacker will, in almost every case, win.
Dedicated Attackers Will Always Win
Despite the multitude of anti-exploit mitigations built into modern operating systems (ASLR, DEP, Sandboxing), hackers were able to compromise every major target this year. This is confirmation that dedicated attackers with the right (financial) motivation, will almost always find a way to break into computer systems. It also highlights the difficulties businesses face when trying to thwart targeted attacks that combine zero-day vulnerabilities/exploits with clever social engineering lures. The dedicated targeted attacker will, in almost every case, win.
