Are this year's major attacks the "cumulative effect of a kind of inaction on cyber security" from the government and big business?