The Source for Cyber Insurance News, Insights and Data
Nearly every cyber insurance applicant now says yes to MFA. A new paper says underwriters should ask whether it is phishing-resistant MFA, and on which accounts. A manufacturer required multi-factor authentication (MFA) on every account. It still lost £150,000. The firm allowed text-message codes as the second factor. An attacker used an adversary-in-the-middle attack to … Read more
Fifty-four percent of security leaders admit leaving high- or critical-severity flaws unpatched at least sometimes, a Chainguard survey finds. At companies with $1 billion or more in revenue, it is 66%. Cyber insurers already write unpatched vulnerabilities into their policies. Most security leaders expect attackers to get in through a software flaw this year. Many … Read more
Attackers now often exploit a flaw before a patch exists. In a conversation with Cyber Insurance News, Revelion’s Mitchell Spicer said annual penetration tests can’t keep pace. Neither can the underwriting built on them. His company sells continuous penetration testing. “An annual pen test is a snapshot, and annual underwriting is a snapshot of that … Read more
Kaseya’s 2026 Cybersecurity Report puts human error first. Two other findings speak directly to cyber insurance requirements. MFA tops the list of controls IT teams find hardest to run. And compliance or insurance rules prompt security spending as often as attacks do. Multifactor authentication (MFA) is one of the first controls cyber insurers look for. … Read more
Most coverage of PwC’s 2027 Global Digital Trust Insights led with budgets. But the boardroom data tells the sharper story. CEOs and directors judge cyber strategy partly by recovery time and by cyber insurability: what the market will cover, and at what price. Eighty-four percent of security and finance leaders expect cyber budgets to rise, … Read more