security lapses exposed