Recovery Took Twice As Long As Planned. Nobody Priced For That.

Three-quarters of organizations that suffered a material cyberattack and business interruption in the past year blew through their recovery time objective. On average, recovery took nearly twice as long as the objective they had set. That figure does not appear in Cohesity’s press release. It sits on page six of the full report, and it … Read more

Silent Push Says Impersonation Monitoring Belongs In Underwriting. The Loss Data Does Not Exist Yet.

Dark corridor of identical closed doors with cyan light beneath one of them, illustrating brand impersonation monitoring and dormant look-alike domains

The Domain That Waited A carrier writes three mid-market manufacturers in the same quarter. Different brokers, different states, no shared vendors. Eleven months later, all three report wire fraud losses inside six weeks of each other. The domains used against them were registered on the same afternoon, at the same registrar, on the same hosting. … Read more

CyberCube Built The AI Coverage Map

No Attacker. No Breach. Still A Loss. The most useful page in CyberCube’s new AI risk report is a blank grid. Exhibit 5 sets six AI event families against eleven policy types: cyber, crime, media, technology errors and omissions, professional indemnity, directors and officers, general liability, property, products liability, auto liability, and standalone AI. Three … Read more

Payment Fraud Controls Have To Work When Nobody Notices Anything Wrong

Half of American finance professionals have let an unusual payment request through, or nearly did, because it appeared to come from someone they trusted. That figure sits at the center of the Yooz 2026 Payment Fraud Readiness Report, published this month. It matters because trust was never a control. It was a shortcut that worked … Read more

Residential Proxy Risk: The Employee Earns Pennies, The Buyer Gets The Router

Silent Push researchers pointed a proxy connection at a home router in Portugal. They reached its management interface. Then they pulled an image file off it as proof. The router belonged to a customer of MEO, Portugal’s largest internet provider. The researchers held no credentials. They planted no malware. They held a subscription to a … Read more

×