T-Mobile hack affecting 50 million customers illustrates the importance of finding the weakest links in your attack surface