Banks confident of their approach to security – but still get hit by hackers