The two big security falsehoods:<p>- Recognizing known attacks (as with virus signatures) is effective.<p>- Patch and release is effective.<p>That sort of worked back in the script kiddie era, when the attacker was some kid in their parents&#x27; basement.  They stopped working when the attacker became organized crime, usually from Russia and China. They became hopeless when the attacker became nation-states.