Banks fail to repel cyber threat