Equifax was breached using a two month old vulnerability (arstechnica.com)

No company I've ever worked at takes security seriously. As a developer I learned long ago to point out in emails (CYA) what they're doing wrong and how our development should work backward from the risks.

Nah, that costs money and takes time. Just outsource the code.

I wonder how much that has cost all the companies that have been hacked. My guess is it's several orders of magnitude more than it saved.

You wonder really just what goes on behinds the scenes leading up the a big breach. Is this on anyone's minds ? It damn well should be.

So we know how - my immediate question is how many other instances are out there, unpatched, tangled up with things like Payment Portals, Auto Reg. Portals. Gah.