I've sure seen a lot of PR statements regarding cyber security that read: "We can't comment on X. That being said, here's a vauge comment on X that sounds reassuring and highlights our competency!"