These two basic flaws make it easy for hackers to break into your systems

In a third of penetration exercises, researchers were able to gain access to the internals of the corporate networks by brute-forcing weak passwords and exploiting unpatched software vulnerabilities.