Ransomware remains the biggest existential cyber threat to small businesses, but others are growing.