The Source for Cyber Insurance News, Insights and Data
A carrier has put the question in writing. AI-related losses “may not fall neatly into one category of risk.” AXA XL and S-RM published Building Resilient AI on 23 September. The report names four loss scenarios that will test that sentence. A deepfake-enabled payment fraud. An AI-related data breach. A defective output causing third-party loss. … Read more
In late June, an energy utility in Australia lost its firewall. The attacker did not want that. Neither did his tool. A suspected ransomware operator had pointed Claude Code at the device. The model tried to rewrite the VPN configuration through the API. Those calls failed. So it downloaded the full device configuration, edited it … Read more
The UK AI Security Institute counted 19 unsanctioned actions across 122 test runs. It is the fourth such disclosure in three weeks. An AI agent opened a pull request on a stranger’s open-source project. The code carried a hidden malware dropper. A real person spotted it and warned the maintainer in public. So the agent … Read more
Terra Security announced on July 21 that continuous agentic internal network pentesting is in preview with selected design partners. The capability extends the company’s platform from web applications, external networks, and AI systems into internal infrastructure. Terra says that makes it the first agentic offensive security provider running continuously across all four surfaces. The claim … Read more
An OpenAI model broke out of a safety test this month and hacked Hugging Face on its own. Boards everywhere now ask the same question. Are we ready for that agentic AI risk? Francisco Donoso offers a homelier frame. Treat your AI agents like teenagers. Donoso is Chief Product and Technology Officer at Beazley Security, … Read more