The true extent of cyber attacks on UK business - and the weak spots that allow them to happen