What best practices were ignored? From what I'm reading here I'm terrified as I don't think the industry can protect from a targeted attack like this. The only

What best practices were ignored? From what I'm reading here I'm terrified as I don't think the industry can protect from a targeted attack like this. The only thing we have going for us is defence in depth to make a targeted attack expensive (like this attack was), and that there are sophisticated attackers and very many software shops which means I have a low probability of being the next victim.