Employee accounts are a breeding ground for attacks, with poor management, broad permissions, and more.