The Source for Cyber Insurance News, Insights and Data
For a decade, the secret-sprawl problem lived in source code. The supply-chain campaigns of the past year moved it onto the laptop. That shift should reach the underwriting questionnaire. A run of incidents over the past twelve months has followed one pattern. Attackers land on a developer or build-server endpoint, harvest valid credentials sitting in … Read more
Ask a law firm one question before you write the policy. Does it run a cybersecurity program, and what framework does it follow? That is the first thing Jason Griffin, VP of Cybersecurity Services at Integris, would want to know. “Do you have a cybersecurity program, and what is it aligned to?” Griffin said. The … Read more
Insurers price the risks they can see. Cryptography is the risk they cannot. Post-quantum cryptography is about to make that blind spot expensive. Most cyber policies rest on a quiet assumption. They assume the encryption protecting a client’s data will hold. That assumption is weakening. Quantum computing threatens the math behind today’s encryption. The threat … Read more
Cyber risk once lived in a traffic-light chart. Red, amber, and green told the board very little. That era is closing. A new FAIR Institute report shows companies now putting hard numbers on cyber risk. Many express it in dollars and euros. For underwriters and brokers, cyber risk quantification (CRQ) is becoming the shared language … Read more
A single line of borrowed code can now sink dozens of firms at once. That is the danger behind fresh guidance from Britain’s national cyber authority. The National Cyber Security Centre has told software teams to audit their dependencies. The reason is blunt. Attackers have learned to poison the open source packages that modern software … Read more