Billions spent on cutting-edge cybersecurity, yet outdated patching and poor credential practices still leave the door open ...