Criminal innovation exposes defensive gaps