Cyber security companies need to start reevaluating their offerings. While phishing attacks continue to become more sophisticated, small businesses need to begin providing security awareness training to their staff and stop continuing to throw technology at the problem.