It's kinda curious as, if you look at businesses, they are super hot on business intelligence (Microsoft knew everything about their competitors and how to suppress them, as an example).
But when a threat actor arrives with a vuln, many orgs just issue a CVE and pretend nothing is happening.
