Big businesses are often cybersecurity savvy, so cybercriminals have started attacking them through smaller suppliers. But there are ways to stop it.