Breaches set to taper off in 2018, but deep rooted vulnerabilities remain