Yes, but not all attackers have the same goals, a foreign agent who has been ordered to eliminate someone would probably not be interested in some attack that lets them steal a car radio.
-
This Tweet is unavailable.
-
This Tweet is unavailable.
-
This Tweet is unavailable.
-
This Tweet is unavailable.
-
This Tweet is unavailable.
-
-
This Tweet is unavailable.
-
This Tweet is unavailable.
-
Replying to @munin
Yes, but you can't quantify the severity of a problem by counting victims! For example, imagine a commercial exploit vendor selling exclusive rights to an RCE, and customer only used once against president of whatever to influence some policy decision. One victim but big deal.
2 replies 0 retweets 3 likes -
Well you can also considere that there are direct victims and indirect ones (which are impacted by the decision of the direct victim)
1 reply 0 retweets 1 like
True, but it can be hard. For example, using an exploit once to compromise a CFO and get early access to financial results, how would you even begin counting indirect victims? I think it might be possible, but not a job I want 
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.