The Source for Cyber Insurance News, Insights and Data
Nearly every cyber insurance applicant now says yes to MFA. A new paper says underwriters should ask whether it is phishing-resistant MFA, and on which accounts. A manufacturer required multi-factor authentication (MFA) on every account. It still lost £150,000. The firm allowed text-message codes as the second factor. An attacker used an adversary-in-the-middle attack to … Read more
For Cybersecurity Awareness Month, a career communicator on the words the cyber industry uses, specifically the word cyber. Mark Twain had a line for this. “The difference between the almost right word and the right word is really a large matter,” he wrote to George Bainton in 1888. “‘Tis the difference between the lightning-bug and … Read more
Ransomware leak sites listed 7,366 victims over the past year. That is 3% fewer than the year before. But… The data taken from those victims tells a different story. Among the 10 groups that leaked the most, combined exfiltration volume rose 275.8% to 896.2 terabytes. Several groups averaged more than a terabyte per victim. Those … Read more
CISOs, beware of deepfake social engineering! Four in ten chief information security officers have now sat through a deepfake on a work audio call. More than a third have seen one on video. Security awareness training taught people to spot a bad link and a wrong domain. It never taught them to doubt a familiar … Read more
A Token For The Pause Button: Social Engineering Losses And The Click Habit It’s 2003. Stage. Steve Jobs. Black turtleneck. Mock turtleneck? And words of digital gospel: buying should be easy. No pause. No friction. Steve didn’t invent impulse. He just helped us lean further into it. Maybe it was even a leap. In 2003, … Read more