Security pros say the Twitter hack highlights how a simple combination of phishing and ‘insider threats’ is the biggest security risk companies need to worry about