How COVID-19 has made small businesses more vulnerable to cyberattacks