Identifying and managing vulnerable accounts