I was involved in the recovery of an Exchange environment after a fairly recent high-profile attack. The exploit was a zero-day, so <shrug>. Maybe the exploite

I was involved in the recovery of an Exchange environment after a fairly recent high-profile attack. The exploit was a zero-day, so <shrug>. Maybe the exploited endpoint could have been hardened somehow, maybe not. However, the team in question used replication in place of fucking backup. And the attacker got into all the datacentres. The hosted mail product had low rate of change and was not a money-maker. The employees were long-time and clearly just in it for the pay. The lesson I draw from it this is: look for teams in your organisation that have become complacent. Parachute in a good engineer for a month. If he or she reports obvious failings, then start firing, and get someone in with a little appetite to improve things. The second lesson I draw is, when private equity takes over a public company, run - don't walk - to the exit.