Organisations are detecting higher numbers of phishing emails than before, while detection of malware and ransomware have halved.