The UK’s National Cyber Security Centre warns that more than 3,000 servers have not been secured.