Cyber Security & Hybrid Work: Are SMBs Underestimating Their Risks?