New threats slip through, it will always happen. It's why user training is an important part of security for a company.

It's not a case of if there will be a security incident but when, you can only limit the likelihood and damage.