The Source for Cyber Insurance News, Insights and Data
Attackers now often exploit a flaw before a patch exists. In a conversation with Cyber Insurance News, Revelion’s Mitchell Spicer said annual penetration tests can’t keep pace. Neither can the underwriting built on them. His company sells continuous penetration testing. “An annual pen test is a snapshot, and annual underwriting is a snapshot of that … Read more
Most organizations running cyber-physical systems experienced a cyberattack on operations in the past year, Claroty’s survey found. Nearly all of them lost money. Fewer than one in four listed an insurance claim among the results. Operational technology (OT) cyberattacks cost organizations about $1 million on average. Fewer than one in four led to an insurance … Read more
Nudge Security CEO Russell Spitler says cyber insurance applications miss the question that decides SaaS supply chain risk. He has yet to see an insurer ask for a company’s list of applications. In August 2025, attackers stole OAuth tokens from Salesloft’s Drift integration. They used them to pull data out of Salesforce instances across many … Read more
Threat intelligence has a timing problem. Most of it arrives after the damage. An indicator of compromise is a receipt, not a warning. Silent Push announced on Aug. 4 that it will sell its underlying infrastructure data to other cybersecurity companies. The Reston, Virginia firm previously kept that data inside its own platform. Now product … Read more
Ransomware had another worst year on record, which now reads less like a warning than a renewal notice. Black Kite counted 7,551 publicly disclosed ransomware victims in the year to March 31, 2026. That runs 24.9% above the prior period. The annual figure hides the shape of the year. Disclosures tracked close to the prior … Read more