The challenge is in thinking like a hacker and being proactive in what we build - block the hacker in ways the hacker hasn't thought of yet. To me, this is the scariest scenario yet, "..no evidence has been found that attackers exploited a previously known or unknown vulnerability to install the malware. All available data points suggest either the use of compromised administrator credentials or physical access to the devices or images." - This is human error.

How well we can protect our organizations is only as secure as the weakest link in our human user base. I've done mobile PM before and it was amazing the number of people I talked to who didn't even have their phone password protected - that's so minimal but it's at least SOMETHING that hackers would need to get through to get to your data.

Every employee needs to be smart regarding every device/machine they use to access corporate (and personal) data - hackers are smart, they don't need a completely free way in to our network.