"While we often point to lack of maturity of security operations as to why a company would miss an attack, it is even more unfortunate when a security vendor is compromised who does have the skills and capabilities to defend against cyber attacks,” says Chris Morales, head of security analytics at Vectra.