Been hacked? Now to decide if you chase the WHO or the HOW

Managers and marketers want the bad guys named. Security pros aren't sure they're right

Imagine a security researcher has plucked your customer invoice database from a command and control server. You're nervous and angry. Your boss will soon be something worse and will probably want you to explain who pulled off the heist, and how."