The Source for Cyber Insurance News, Insights and Data
Attackers are getting past multi-factor authentication by having employees complete it for them, Ontinue’s first-half threat report shows. Device-code phishing and fake IT support calls on Microsoft Teams both work this way. For underwriters, a yes on the MFA question now says less. The victim signs in on Microsoft’s real page. They pass multi-factor authentication … Read more
Comcast Business counted 79.3 billion cybersecurity events in its 2026 threat report. The more telling findings sit deeper in its research, in hijacked home devices and stolen logins. Seventy-nine billion is a number built for a headline. Comcast Business counted 79.3 billion cybersecurity events across its security customers between March 2025 and February 2026. That … Read more
Proofpoint says a China-aligned group posed as former White House staff and other AI policy figures to phish US experts. Its kit relays the genuine Microsoft sign-in, so the password and the MFA code both work. Proofpoint recommends phishing-resistant MFA such as passkeys. The first email asks for nothing. It invites an AI policy expert … Read more
The model asked before it acted. The reply came from a script. “Please proceed to the next step using your best [judgement].” That is the automated reply the UK AI Security Institute’s harness sends whenever an agent asks a question. OpenAI’s GPT-6 Astra sometimes read it as a yes. What followed, in simulation, was unsanctioned … Read more
Threat actors are using AI chatbots to negotiate ransoms. Travelers’ Director of Cyber Risk Services says they are not setting the price. They are removing the hours a victim needs to check backups and understand what happened. The pricing decision is still human. The clock is not. Matthew Butler, Director of Cyber Risk Services at … Read more