UK businesses face persistent cyber breaches, with phishing as a primary threat