Half Of Security Leaders Knowingly Leave Critical Flaws Open. Insurers Ask About That.

Cyber Insurance News report on unpatched vulnerabilities showing a laptop with a list of warning alerts on a desk in a bright office

Fifty-four percent of security leaders admit leaving high- or critical-severity flaws unpatched at least sometimes, a Chainguard survey finds. At companies with $1 billion or more in revenue, it is 66%. Cyber insurers already write unpatched vulnerabilities into their policies. Most security leaders expect attackers to get in through a software flaw this year. Many … Read more

Healthcare Ransom Payments Keep Falling. Downtime Still Drives The Bill.

Cyber Insurance News report on healthcare cyberattacks showing a dark hospital corridor with blank monitors and an empty gurney

Fewer healthcare organizations hit by ransomware are paying, a Ponemon Institute survey for Proofpoint finds. The costliest healthcare cyberattacks still averaged $4.2 million, mostly in downtime. The patient harm the study highlights may sit outside cyber cover. Healthcare organizations hit by ransomware are paying less often. In 2022, 51% said they paid. This year, 31% … Read more

A Pen Test Is A Snapshot. Annual Underwriting Is A Snapshot Of That Snapshot.

Cyber Insurance News conversation on continuous penetration testing showing an instant photo of a closed door held in front of the same door now standing open

Attackers now often exploit a flaw before a patch exists. In a conversation with Cyber Insurance News, Revelion’s Mitchell Spicer said annual penetration tests can’t keep pace. Neither can the underwriting built on them. His company sells continuous penetration testing. “An annual pen test is a snapshot, and annual underwriting is a snapshot of that … Read more

Criminals Case The Joint First. The Dark Web Shows When.

Cyber Insurance News & Information (CINI) podcast on dark web monitoring with CDL Cyber Intelligence, Think Like A Criminal, Act Like An Angel, over a rain-soaked alley with a green-lit doorway

Think like a criminal. Act like an angel. Twenty-six years in cybersecurity have led Jonathan Palmer to that motto. On the CINI podcast, the CDL Cyber Intelligence CEO explains how dark web monitoring spots attackers sizing up a target. He also covers why underwriters need that intelligence and what CISOs struggle to tell their boards. … Read more

A Ransomware Firm Promised Not To Pay Hackers. Prosecutors Say It Paid Them And Marked Up The Bill.

Cyber Insurance News story on a ransomware recovery firm fraud case showing a glowing digital key beside an invoice on a dark desk

Federal prosecutors have charged the owner of MonsterCloud with wire fraud. The Florida ransomware recovery firm sold victims an alternative to paying criminals. Prosecutors say it paid the criminals and billed clients far more. ProPublica flagged the practice in 2019. A ransomware recovery firm told victims they would not have to pay. It paid anyway … Read more

×