People are always the weakest link, but the very weakest is always those who consider themselves much better than average or even "untouchable" Old and busted: Targeting servers & web bugs. New hotness: Pwning devs https://www.theregister.com/2020/09/04/disclosure_developer_targeting/ via @theregister