What companies should know about cyber threats