There are two stages of a security career: Before you know the truth of what you read in the news on an incident, and after, when you know exactly what happened and can't say a single fucking thing.
There are compensating controls and defense complexities that delayed or simply didn't work in many cases, through even further complexity. A narrative of how the attacker made 1=1 is not the complete story but telling that is so full of minutia and NDA it's basically not worth trying.
Some day you will have this experience and all your excoriation of the stupid fools then will flash before your eyes because you are the stupid fool today. You will watch it happen to you as you performed before. Time will complete its circle in a horror whose photons are polarized to only your eyes. The knife you hold will enter your chest.
