There is no shortage of headlines these days detailing breaches, Advanced Persistent Threats (APTs), and other such attention grabbing topics. The details vary in each individual case of course, but most of these stories have one common thread: they all involve malicious code, also known as malware. Amidst all of the headlines, I am concerned that as a security community, we are losing sight of an important principle that is very important to remember: not all intrusions involve malware.