Nicholas J. Percoco:
We (@SpiderLabs) investigated >300 breaches in 2011. 100% used malware. 0% detected by AV on targets. In lab top 25 AV engines detected 12%.
Read that again: zero percent of malware was detected by antivirus software in real-world conditions. In a lab, it was only twelve percent. Via Craig Hockenberry.