A single criminal campaign has exposed a structural weakness at the heart of modern enterprise security: organizations are spending heavily on advanced tools while still allowing three‑year‑old stolen passwords to unlock terabytes of their most sensitive data. Over roughly a year, a threat actor known as Zestix (aka Sentap) quietly breached about 50 global enterprises…