By Robinson Meyer and Kaveh Waddell, includes "... All this confusion has important consequences. The fact that this is how major hacks seem to work—that they’re unknown or undisclosed for long periods of time, only for the news to arrive in a slow drip of dreadful reports—complicates the attempts of people to understand them or follow them. ... The challenge of accounting for the damage reflects an outdated approach to cybersecurity..."