Until businesses begin to account for uncontrolled variables in their threat models, attackers will continue to exploit the weakest link in the chain.