It seems dishonest to pretend struts was their only problem. That just happened to be the trick of the day. As others have mentioned, security is designed in la

It seems dishonest to pretend struts was their only problem. That just happened to be the trick of the day. As others have mentioned, security is designed in layers. The fact that a single layer can fail and cause so much damage is simply bad design. Unfortunately there is a lot of bad design in IT. InfoSec may not be new, but I would argue up until about the last 15 years, it was really not considered outside of defense departments.