Top story From vulnerability whack-a-mole to strategic risk operations Vulnerability management badly needs a risk upgrade Sander Almekinders January 12, 2026