In-brief: A survey of penetration testers by Rapid7 finds most organizations are failing to detect malicious activity on their networks.