You can patch software, but you can't patch people. This is why social engineering will always work. The human brain is loaded with forever-day vulnerabilities...and attackers are constantly probing for them. Sometimes I think that they've developed a more applicable & empirically tested theory of human motivation and cognition than psychologists... Sometimes tens of thousands of A/B tests a day...