As was pointed out to me, these numbers do not represent real-life events. No one should assume these are accurate metrics over a twelve-day period for the average information security office. Now, if you add a few orders of magnitude...

---

The Twelve Days of Infosec

On the Twelfth Day of Infosec, the network gave to me...
Twelve hackers hacking,
Eleven spammers spamming,
Ten form injections,
Nine busted authNs,
Eight bad configures,
Seven crap encryptions,
Six plaintext cookies,
Five Pastebin posts!
Four calling cons,
Three Wikileaks,
Two credit cards,
And a forced password change for us all.

Happy Holidays from the Songs of Infosec!