Banks open to attack as security spending stales