According to NSA and CISA, the worst cybersecurity misconfigurations include insufficient internal network monitoring, lack of network segmentation, and poor patch management. See the full list:

Securing Your Supply Chain: Practical Cybersecurity Steps for Small Businesses
Picture this: your business’s front door is locked tight, alarm systems are humming, and firewalls are up, but someone sneaks in through the back door,