Always comes back to fundamentals: defense in depth, principle of least privilege, patch your shit. Almost every security issue comes from violating one of those.