How to spot your biggest security threat? Just look out for the humans