But what they don't talk about is how bad or good security tools are in mitigating these attacks, a pity.