The Source for Cyber Insurance News, Insights and Data
Nudge Security CEO Russell Spitler says cyber insurance applications miss the question that decides SaaS supply chain risk. He has yet to see an insurer ask for a company’s list of applications. In August 2025, attackers stole OAuth tokens from Salesloft’s Drift integration. They used them to pull data out of Salesforce instances across many … Read more
Threat intelligence has a timing problem. Most of it arrives after the damage. An indicator of compromise is a receipt, not a warning. Silent Push announced on Aug. 4 that it will sell its underlying infrastructure data to other cybersecurity companies. The Reston, Virginia firm previously kept that data inside its own platform. Now product … Read more
Ransomware had another worst year on record, which now reads less like a warning than a renewal notice. Black Kite counted 7,551 publicly disclosed ransomware victims in the year to March 31, 2026. That runs 24.9% above the prior period. The annual figure hides the shape of the year. Disclosures tracked close to the prior … Read more
NowSecure found that 95% of large organizations deploy AI inside mobile applications, while 37% lack behavioral monitoring, and apps built predominantly from third-party code report more than twice the security-incident rate. Mobile AI cyber insurance underwriting is becoming more difficult as AI and third-party code spread through enterprise applications faster than security programs can assess … Read more
On Friday, 19 September 2025, ransomware hit a piece of software most travelers never notice. Collins Aerospace runs MUSE. It is the shared check-in system used across many European airports. Heathrow, Brussels, Berlin, and Dublin lost their automated systems. Staff checked passengers in by hand. At least 217 flights were canceled. None of those airports … Read more