Security firms find themselves especially exposed.