Real-time cyber risk assessment