The Source for Cyber Insurance News, Insights and Data
Fifty-four percent of security leaders admit leaving high- or critical-severity flaws unpatched at least sometimes, a Chainguard survey finds. At companies with $1 billion or more in revenue, it is 66%. Cyber insurers already write unpatched vulnerabilities into their policies. Most security leaders expect attackers to get in through a software flaw this year. Many … Read more
Attackers now often exploit a flaw before a patch exists. In a conversation with Cyber Insurance News, Revelion’s Mitchell Spicer said annual penetration tests can’t keep pace. Neither can the underwriting built on them. His company sells continuous penetration testing. “An annual pen test is a snapshot, and annual underwriting is a snapshot of that … Read more
Kaseya’s 2026 Cybersecurity Report puts human error first. Two other findings speak directly to cyber insurance requirements. MFA tops the list of controls IT teams find hardest to run. And compliance or insurance rules prompt security spending as often as attacks do. Multifactor authentication (MFA) is one of the first controls cyber insurers look for. … Read more
Most coverage of PwC’s 2027 Global Digital Trust Insights led with budgets. But the boardroom data tells the sharper story. CEOs and directors judge cyber strategy partly by recovery time and by cyber insurability: what the market will cover, and at what price. Eighty-four percent of security and finance leaders expect cyber budgets to rise, … Read more
Comcast Business counted 79.3 billion cybersecurity events in its 2026 threat report. The more telling findings sit deeper in its research, in hijacked home devices and stolen logins. Seventy-nine billion is a number built for a headline. Comcast Business counted 79.3 billion cybersecurity events across its security customers between March 2025 and February 2026. That … Read more