Ill-prepared global IT organizations are trying to cover up after being "sucker-punched" with a vicious combination of emerging security threats, IDC warned yesterday.