UK firms ill-equipped to prevent security attacks