APT stalks the top firms, but most are in denial