COVID-19 exposes gaps in cybersecurity safety net as millions work from home