Law firms are “performing admirably” in response to daily cybersecurity threats, but are still being successfully compromised, research has found.