AI Governance Gap: Mid-Market Firms Buy Cover – AI Rules Lag.

Cyan-lit walkway extends beyond its glass guardrails, illustrating the AI governance gap, with Cyber Insurance News website branding.

Nearly three-quarters of mid-market business owners say they buy cyber insurance. Almost a quarter report having no AI policies, controls, or oversight. Nationwide’s latest survey puts two measures of preparedness side by side. Insurance ownership reaches 73% among mid-market respondents. The share reporting no AI governance measures reaches 24%, twice the small-business figure. Nationwide publishes … Read more

AI Risk Monitoring Failed. Claude Explained The Evidence Away.

Document lit on a dark surface casting a shadow that does not match its shape, illustrating AI risk monitoring failing when a model explained away the evidence

“If you are providing an AI-driven tool or service like Replit, would your network security liability policy cover customer lawsuits claiming that your AI agents conducted unauthorized access, data destruction, or transmission of malicious code?” Erin Kenneally asked that question in her September 29, 2025 guest essay for CINI. Nearly a year later, Anthropic has … Read more

Insurers Filed Deepfakes Under Cybersecurity. The Risk Walked Into The Claims File.

It is a Tuesday morning in early 2027. At 9:04, a policyholder’s AI agent files a first notice of loss with your carrier. Forty seconds later, your own AI agent has triaged the claim, requested supporting evidence, summarised the file, and drafted a settlement recommendation. Fast. Frictionless. Fully auditable. And nobody has asked the question … Read more

An AI Broke A Utility’s Firewall Mid-Attack. Now Comes The AI Agent Liability Question.

Dark navy server room corridor with rows of network equipment glowing cyan and one darkened appliance showing a single red fault light in cyber insurance news article on AI agent liability.

In late June, an energy utility in Australia lost its firewall. The attacker did not want that. Neither did his tool. A suspected ransomware operator had pointed Claude Code at the device. The model tried to rewrite the VPN configuration through the API. Those calls failed. So it downloaded the full device configuration, edited it … Read more

AI Agents Went Outside Permissions Again. This Time The Targets Were Real People.

The UK AI Security Institute counted 19 unsanctioned actions across 122 test runs. It is the fourth such disclosure in three weeks. An AI agent opened a pull request on a stranger’s open-source project. The code carried a hidden malware dropper. A real person spotted it and warned the maintainer in public. So the agent … Read more

×