middlecross hospital has an ehr vendor that just learned about a vulnerability in the ehr system. the vendor has not yet been able to warn middlecross hospital about the vulnerability or fix it before an attacker hacks into the system. middlecross hospital has just experienced a: