More than half of businesses are investing in a cybersecurity solution they know is not the most secure