If even the best-resourced companies, like Sony and JP Morgan, are losing the cyber-security battle, what hope is there for the rest of us?