The Source for Cyber Insurance News, Insights and Data
About one in five companies Black Kite monitors shows post-quantum encryption on at least one public system. Black Kite’s research chief says much of that likely came from their cloud providers. Its security chief says insurers have already asked about it. Black Kite has a number for how many companies look ready for quantum-era encryption. … Read more
An attacker used a two-person firm’s legitimate access to Denmark’s ID register. It pulled names, addresses, and ID numbers on about 8.8 million people. An unusually large bill raised the alarm. I asked Raj Ananthanpillai, CEO of identity company Trua, who failed and who should pay. Denmark’s Central Person Register, known as CPR, gives every … Read more
Attackers now often exploit a flaw before a patch exists. In a conversation with Cyber Insurance News, Revelion’s Mitchell Spicer said annual penetration tests can’t keep pace. Neither can the underwriting built on them. His company sells continuous penetration testing. “An annual pen test is a snapshot, and annual underwriting is a snapshot of that … Read more
Most organizations running cyber-physical systems experienced a cyberattack on operations in the past year, Claroty’s survey found. Nearly all of them lost money. Fewer than one in four listed an insurance claim among the results. Operational technology (OT) cyberattacks cost organizations about $1 million on average. Fewer than one in four led to an insurance … Read more
Nudge Security CEO Russell Spitler says cyber insurance applications miss the question that decides SaaS supply chain risk. He has yet to see an insurer ask for a company’s list of applications. In August 2025, attackers stole OAuth tokens from Salesloft’s Drift integration. They used them to pull data out of Salesforce instances across many … Read more