Cyber-criminals see a recession as an opportunity to attack companies at their weakest, meaning SMBs can't afford to reduce investment in security