The Source for Cyber Insurance News, Insights and Data
Attackers are getting past multi-factor authentication by having employees complete it for them, Ontinue’s first-half threat report shows. Device-code phishing and fake IT support calls on Microsoft Teams both work this way. For underwriters, a yes on the MFA question now says less. The victim signs in on Microsoft’s real page. They pass multi-factor authentication … Read more
Kaseya’s 2026 Cybersecurity Report puts human error first. Two other findings speak directly to cyber insurance requirements. MFA tops the list of controls IT teams find hardest to run. And compliance or insurance rules prompt security spending as often as attacks do. Multifactor authentication (MFA) is one of the first controls cyber insurers look for. … Read more
Proofpoint says a China-aligned group posed as former White House staff and other AI policy figures to phish US experts. Its kit relays the genuine Microsoft sign-in, so the password and the MFA code both work. Proofpoint recommends phishing-resistant MFA such as passkeys. The first email asks for nothing. It invites an AI policy expert … Read more
Seventy percent of US business insurance buyers now carry cyber cover. That is the highest share Travelers has recorded since its Risk Index turned cyber-focused in 2018. The same buyers report 89 percent day-to-day AI use across their workforce. Fifty-nine percent have formal practices governing that use. They are buying the policy faster than they … Read more
Threat actors are using AI chatbots to negotiate ransoms. Travelers’ Director of Cyber Risk Services says they are not setting the price. They are removing the hours a victim needs to check backups and understand what happened. The pricing decision is still human. The clock is not. Matthew Butler, Director of Cyber Risk Services at … Read more