This is totally Peter G. Neumann* territory. Something to add to a second edition of his book, "Computer-Related Risks", if he ever makes one.

http://catless.ncl.ac.uk/risks/