Comment by spydum

I know people seem to think nsa and other gov threat actors live in a land of zero days and advanced techniques... And to some degree, they sure do develop those and are able to leverage them.

However, from my point of view most targets are able to be compromised by poor configs, hygiene, well known and patchable vulns, or the more likely avenue: the humans operating the system.