virtual event vulnerability