Despite growing awareness, organizations remain plagued with unpatched vulnerabilities and weaknesses in credential policies.