Phishing a consumer service like Netflix could lead to illicit access to an enterprise email account.

Consulting giant is latest firm guilty of serious security failings