Red team exercise revealed a score of security fails