Middle-market companies are facing the bleak reality that they must increasingly combat cyber threats on their own – with little help and fewer resources