This month we celebrate 8 years of 2|SEC Consulting. To reminisce, I have been looking at some penetration test reports we took on when we started out. Before you wangle the GDPR data retention carrot at me, these reports are of course redacted with information kept for statistical purposes only. What I’m seeing, is that