Cyber risks: old wine in new (virtual) bottles?