Ransomware no longer biggest cyber security threat, report finds