Never let common sense or ten seconds of research get in the way of a great soundbyte, even if it is patently false. Apparently Brad MacKenzie didn't check his favorite vulnerability database to notice the over 1,100 vulnerabilities in security software dating back to at least 1996-11-11, when a vulnerability in a firewall was discovered..

A Rare Find: New Exploit in Firewall puts Applications at Risk

This post was written by Rick B. on April 12, 2010

http://clearskies.net/blog/2010/04/12/a-rare-find-new-exploit-in-firewall-puts-applications-at-risk/

Researchers from Clear Skies Security have identified a flaw that negates the protection provided by certain Imperva Web Application Firewalls (WAF). This attack essentially bypasses security controls provided by the Imperva device and allows malicious requests to pass through the device unfiltered, allowing for potential application exploitation remotely over the Internet.

[..]

"It is quite rare to find vulnerabilities in security software," said Brad MacKenzie CEO for Clear Skies Security.