InfoWorld - Many sandbox security vendors claim that their products stop all known and unknown attacks. Even assuming the ability to curtail all known attacks could be proven, it’s simply impossible to believe that any piece of software could halt all unknown attacks. Of course, that doesn’t prevent the vendors from making empty promises or the malware authors from proving them wrong.

See the original post here:
Two tenacious exploits debunk vendor claims
(InfoWorld)