Passwords are still how most small businesses get breached. The Colonial Pipeline ransomware incident traced back to one compromised VPN…