For years, cybersecurity has been seen as a concern mostly for large enterprises, but that thinking no longer holds up.