New research suggests “cybersecurity risks are now neither hypothetical, nor trivial.”