Weathering the Storm: Security Testing and Advanced Persistent Threats