When the Same Cyberattack Scores Higher
TL;DR for operators A vulnerability score can describe the technical severity of a cyberattack without fully representing who depends on the affected infrastructure. Barletta et al. propose a scoring extension that adds affected people, organizations, and operational locations to conventional cybersecurity assessment. Across four simulated attacks, three receive higher severity scores under the proposed system. These increases demonstrate how the new calculation behaves, not that it predicts real-world harm more accurately. ...