“Not only is this terrifying because it can happen to any organization that’s building software, but it’s actually also incredibly difficult to detect,” said Dan Draper, founder of CipherStash.