Routine internal access, not exploits, drives cyber risk

Routine admin tools, not exotic exploits, let attackers race across networks, compromising over half of systems in under an hour.