Absence of multi-factor authentication reportedly left a remote access application exposed.| CSO Online