The paper explains that attackers now bypass enterprise defenses by exploiting employees’ family and household data, making household exposure a critical security risk. It argues that protecting the workforce—and the enterprise—requires extending security controls beyond employees to their families.