This week: a critical vulnerability actively exploited in enterprise networking gear since 2023, a government contractor breach affecting 25 million people, a fundamental shift in how CEOs are thinking about AI risk, and the numbers that should reshape your cyber investment strategy.