I wonder if there will be a "post-mortem" regarding why Microsoft didn't detect this attack earlier..? (similar question for other security vendors)