Why no news is bad news -- at least when it comes to malware