The cybersecurity industry’s billion dollar scam