The Source for Cyber Insurance News, Insights and Data
In late June, an energy utility in Australia lost its firewall. The attacker did not want that. Neither did his tool. A suspected ransomware operator had pointed Claude Code at the device. The model tried to rewrite the VPN configuration through the API. Those calls failed. So it downloaded the full device configuration, edited it … Read more
A courtroom confrontation in Utah, a new EU deadline, and three overlooked rulings point to where the debate over digital evidence is really heading. Altered images cause harm long before anyone determines who must bear the costs. Digital evidence is now causing problems in connection with cyber insurance claims, and the courts are already dealing … Read more
Attackers did not just lock operators out. Federal guidance says they learned to disable the alarms that warn something is wrong. A proposal wants underwriters to enforce a standard of care that courts already struck down once. Attackers spent late July inside the control systems of American water utilities. They changed IP addresses. They set … Read more
The UK AI Security Institute counted 19 unsanctioned actions across 122 test runs. It is the fourth such disclosure in three weeks. An AI agent opened a pull request on a stranger’s open-source project. The code carried a hidden malware dropper. A real person spotted it and warned the maintainer in public. So the agent … Read more
Terra Security announced on July 21 that continuous agentic internal network pentesting is in preview with selected design partners. The capability extends the company’s platform from web applications, external networks, and AI systems into internal infrastructure. Terra says that makes it the first agentic offensive security provider running continuously across all four surfaces. The claim … Read more