VC firms are ramping up their own defences as they are conscious of the threat cybercriminals pose but too often they fail to check that their target companies are doing the same