When an AI Agent Causes the Loss: Shadow AI and the Underwriting Questions It Raises

An AI agent can now write code, call tools, move files, and run commands. In most setups, it does all of that with the permissions of the person who launched it. So when an agent causes damage, the first underwriting question is deceptively hard. Who acted? Remy Guercio, Product Lead for Aperture at Tailscale, does … Read more

Agent Identity Becomes an Underwriting Question: Can You Account for Your AI Agents?

A new launch puts agent identity at the center of a simple underwriting premise. Carriers cannot insure what they cannot measure. Ceros launched today as what its maker calls the first trust layer purpose-built for autonomous AI agents. Beyond Identity, the company behind it, pitches Ceros as a single layer for agent identity, observability, and … Read more

Developer Laptops Are Now Credential Stores – Underwriters Should Treat Them That Way

For a decade, the secret-sprawl problem lived in source code. The supply-chain campaigns of the past year moved it onto the laptop. That shift should reach the underwriting questionnaire. A run of incidents over the past twelve months has followed one pattern. Attackers land on a developer or build-server endpoint, harvest valid credentials sitting in … Read more

Law Firm Cybersecurity: One Question Underwriters Should Ask First

Ask a law firm one question before you write the policy. Does it run a cybersecurity program, and what framework does it follow? That is the first thing Jason Griffin, VP of Cybersecurity Services at Integris, would want to know. “Do you have a cybersecurity program, and what is it aligned to?” Griffin said. The … Read more

Your Password Is Now The Perimeter – Sophos Finds 71% Of Firms Hit By Identity Attacks

The Breach Nobody Saw Coming Imagine it’s Tuesday morning. The CFO gets a call: systems are locked, and a ransom note appears on the screen. The attacker didn’t break in physically; they used a stolen password. This happened to seven out of ten organizations Sophos surveyed last year. The State of Identity Security 2026 report, … Read more