Staff and companies increasingly use third-party apps for work. But are employers alert to the security threat these apps pose?