WA universities and TAFE colleges are failing to adequately protect themselves from attacks by cyber criminals, a scathing report warns.