2FA? We've heard of it: White hats weirded out by lack of account security in enterprise

Plus: Appetite for internal pen-testing appears to be growing

Few companies bother to secure employee accounts with simple protections like two-factor authentication (2FA) and lockouts, an analysis by security company Rapid 7 has found."