All of the groups mentioned used spearphishing and 'browser vulnerabilities'. Shouldn't banks be more savvy of these attacks? It's not a happy thought that the

All of the groups mentioned used spearphishing and 'browser vulnerabilities'. Shouldn't banks be more savvy of these attacks? It's not a happy thought that the safety of a given bank depends on whether it's call centre staff are running old version of Flash.