A new report warns the vast majority of UK organisations are not adequately prepared to deal with modern cyber attacks.