Eugene Spafford, one of the first to analyze the Morris Worm, says we haven’t learned from it or other major security breaches since.