Many small businesses think they are safe from cyberattacks, but this is a dangerous misconception.