All our ransomware news
AI Agents
Living-Off-the-Land 2.0: How Autonomous AI Agents Are Weaponizing LOTL Tradecraft — And What It Means for Cyber Underwriting
The convergence of agentic AI and living-off-the-land attack techniques is collapsing three attacker constraints at once: cost, skill, and detectability. A deep analysis of demonstrated capabilities, real incidents, and the underwriting implications that should reshape your risk selection in 2026.
Michael Guiao
9 min read
Risk Register · · 9 min read
Why Your Cyber Risk Register Is Lying to You — And What to Do About It
Most cyber risk registers are compliance checklists with no connection to real threat data, real incidents, or real financial exposure. Here is how to build one that actually works for underwriting decisions.
Underwriting · · 10 min read
The Death of the Questionnaire: Why Underwriters Now Demand EDR Telemetry Before Binding
Self-reported security questionnaires are dead. Coalition, At-Bay, and Corvus now require EDR telemetry, MFA logs, and backup restore proofs before binding. A practitioner guide to what evidence underwriters demand at renewal — and what happens to the premium when it is missing.
Incident Tracker · · 8 min read
LOTL 2.0 Incident Tracker: Documented Cases of AI-Augmented Living-Off-the-Land Attacks (2025–2026)
Living document tracking confirmed and suspected cases of autonomous or AI-augmented LOTL attacks in the wild. Updated as new evidence emerges. Includes attack chain analysis, tradecraft observations, and underwriting takeaways for each incident.
Ransomware · · 7 min read
NIS2 Ransomware Reporting Requirements: What Incident Response Teams Must Know
Under NIS2, ransomware incidents trigger mandatory reporting obligations with tight deadlines and personal liability for management. Here is the compliance playbook incident response teams need.
Ransomware · · 7 min read
Ransomware Attack Vectors in 2026: What Risk Managers Must Monitor
Ransomware groups have moved beyond phishing. Here are the five dominant attack vectors risk managers need to understand — and how each one changes the insurance equation.
Ransomware · · 5 min read
Ransomware Claims in 2026: What the Data Tells Underwriters About Pricing Risk
Ransomware claims frequency is shifting again in 2026. Here is what the latest data patterns mean for how underwriters price cyber risk, structure deductibles, and evaluate ransomware-specific endorsements.
Ransomware · · 6 min read
Ransomware Underwriting Models in 2026: From Flat Premiums to Dynamic Risk Pricing
Cyber underwriters still using flat ransomware pricing are leaving money on the table. Here is how leading insurers are building dynamic pricing models using threat intelligence, sector exposure, and real-time data.
blog.featured
AI Tooling RCE: The Sublimit Layer Underwriters Rarely Underwrite
Cyber Insurance ·
9 min read
SolarWinds SAML Bypass: The IT Ticketing Supply-Chain Path
Cyber Insurance ·
9 min read
AM Best and S&P Flag Cyber Pricing Risks: What Underwriters Should Do at Renewal
Cyber Insurance ·
7 min read
One Salesforce Integration Breach Just Hit 200 Cyber Insureds
Cyber Insurance ·
8 min read
Premium Report
2026 Cyber Risk Landscape Report
24 pages of threat analysis, claims data, and underwriting implications for European cyber insurance.
View Reports →