Security product flaws are magnet for attackers