This is not as much about xenophobia (as xenophobic as USA is) but about not having an egg on your face. Companies seems to love to throw "state sponsored" aro

This is not as much about xenophobia (as xenophobic as USA is) but about not having an egg on your face. Companies seems to love to throw "state sponsored" around because it sounds better to imply that you were so secure that only North Korea, Russia or China had a chance and at that level of attack (by such a state that openly challenges USA so often) it's not your fault you got breached because it's implied everyone would be. Equifax ran outdated Apache Struts for a few days after a patch and information about the vulnerability was out and now China is being pointed at with really flimsy (IMO) evidence[0]. On the other hand no one probably wants to defend China, North Korea and Russia and it sounds much cooler to be fighting against their state hackers than script kiddies and saying that all these "high profile state attacks" were script kiddies is basically shitting on the security industry in a way. [0] - http://www.dailymail.co.uk/news/article-4937010/Clues-suggest-China-suspect-massive-Equifax-hack.html http://www.dailymail.co.uk/news/article-4937010/Clues-sugges...