Cybercrime watchdogs at the Global Cyber Alliance studied the top 50 IT contractors used by the U.S. government and found troubling results, with email still vulnerable to phishing and spoofing attacks.