What are some cybersecurity pain-points out there?

Hey,

Just wondering, what are some cybersecurity pain points that everyone faces? In Australia, it looks like a ton of large corporate company have been been involved in data leaks; most notable Optus and Medibank. In the latter, even health data was leaked. I'm actually surprised. For instance, in the Optus hack, apparently someone just scraped an API endpoint that was left accidentally open.

I was thinking that if large companies can't handle cybersecurity, small ones are in even greater trouble. I wonder what prevents developers / founders from securing their platforms? A lack of knowledge, a lack of a cybersec team?