Phishing attacks, unsecured communications, unmonitored mobile device usage and more are creating security vulnerabilities at many firms.