Cybersecurity threats seem to remain stubbornly a step ahead of organizations trying to protect themselves. That includes federal agencies.