Is HR weakest point against targeted attacks?

    Imagine a situation - you're HR manager and you do your usual work - seeking for people and CV processing. You got hundreds of letters and these letters contain DOC and PDF files. Since PDF is one of most vulnerable formats (