Nine years after official warnings, government agencies still fail to enforce basic email protections. A prank demanding cat pictures in Mossad's name exposed gaps that make phishing easy, without anyone breaching the agency's servers