Cyber Risk Aware vs Pistachio Scenarios (2026)