K-12 schools are prime targets for phishing — and most IT teams are stretched thin trying to stay ahead.