SMEs vulnerable to cyber attacks