The thing is that in most companies you're far more likely to fall victim to a simple and random malware emailed or ran by your employees, than you are to be ca

The thing is that in most companies you're far more likely to fall victim to a simple and random malware emailed or ran by your employees, than you are to be carefully targeted by a worm based on AV vulnerabilities. With that said I prefer to view security as, "You likely will be the victim of a planned attack, so plan from there", but still. Odds are not favourable.