Terrible cloud security is leaving the door open for hackers. Here’s what you’re doing wrong