Separate studies find widespread security design flaws in bank Web sites and internal threats to corporate networks, too.