Another day and another story about a new cyber threat. It sounds worse each time - defenses that don't defend and employees that are just trying to do their job and allowing malware into the system, yet we don't seem to feel the pain. It's easy to get complacent, after all, how bad can it get?