50% of law firms cited phishing as the top cybersecurity concern, a new category this year, surpassing ransomware and user behavior.