Security researchers should read 'Stealing the network: Complete series'. Book has covered very practical crazy hacking scenarios. In one story, hacker keeps monitoring researchers' system for the latest zero day. In another interesting story, hacker targets dev server instead prod assuming security is less tightened there.