Banks have spent years hardening their apps, encrypting databases, deploying fraud detection systems and taking other measures to protect against cyberattacks — and yet they appear to have overlooked ...