Two recent stories share an uncomfortable quality: the products organizations deploy to enforce security controls have become the most attractive targets on the network.