Report card: Cybersecurity efforts still falling short