A new defense-contractor prosecution exposes a global remote-work vulnerability: a genuine device and a valid login do not ...