Legacy systems that providers frequently use lack basic cybersecurity controls and often aren't properly vetted before connecting to a network, according to research from Vectra.