Cyber Insurance News & Information Podcast

Cyber Insurance News & Information
  • 5.0 (3)
  • News
  • Updated Semimonthly

The leading pure-play source for cybersecurity insurance news, insights and data, Cyber Insurance News (CIN) is produced by a team of award-winning journalists with decades of reporting experience, along with deep cyber and financial expertise and networks. Martin Hinton is your host and the Executive Editor of Cyber Insurance News. He is an award-winning journalist and storyteller with broad experience and a proven ability to distill complex ideas into compelling and impactful narratives across video, print, and digital media

  1. 2d ago

    Compliant In May. Exposed In June.

    A defense supplier was compliant on paper from January to May. In June, it moved its servers from France to Germany and opened more than 17,000 ports. Nobody had to tell the auditors. Andrew Horkan, CEO of Cyber Tzar, tells Martin Hinton why compliance is a snapshot and security is continuous. He explains what an outside-in scan can see from the public pavement, how Cyber Tzar's 0-to-999 score is built, and why brokers are starting to ask for remediation before they bind. The conversation also follows the Jaguar Land Rover attack two steps down the supply chain, to a family hauler that lost 390,000 pounds in its first month and never saw government support. And it closes on a plan to score every active domain on the internet at least once a quarter by 2028. Guest: Andrew Horkan, CEO, Cyber Tzar https://uk.linkedin.com/in/andrew-horkan https://cybertzar.com/ This episode is brought to you in association with Cyber Tzar and Source Consulting. Referenced in this episode: Martin Hughes, Source Consulting: https://www.linkedin.com/in/martin-hughes-59897a43/ Cyber Essentials (NCSC): https://www.ncsc.gov.uk/cyberessentials/overview Minor ID theft Podcast: https://youtu.be/cogg7NlmYk8?si=WMZKCxDIFujU5I6Q Take the Cyber Insurance News 2026 survey. Eight minutes, and respondents get the results first. https://s.surveyplanet.com/itpr6r59 Music licensed through Soundstripe. Codes: KVAVCLTJATQTULH7, D5PIVNBS5SNZQ0ON

  2. Sep 22

    Who Pays When Nobody Can Prove It? C2PA & Content Provenance with DigiCert's Mike Nelson

    Claim photos, MRIs, contracts: if nobody can prove a digital record is authentic and unchanged, somebody still pays. DigiCert's Mike Nelson explains how content provenance and the C2PA standard track where a file came from and every change made to it. Martin Hinton, executive editor of Cyber Insurance News & Information, talks with Mike Nelson, vice president and field chief technology officer at DigiCert, about: • The Utah courtroom video that raised the question every claims adjuster should be asking• Why digital files lack the provenance the antiques trade has relied on for centuries• How C2PA digital signatures and the trust list create a chain of custody• A parking-lot fender-bender, and how easy AI makes it to fake claim damage• Why hospital imaging machines in service for 20 years are still a weak point• Why today's credentials can identify the camera but not the person holding it Read the article and download the transcript: cyberinsurancenews.org/content-provenance-liability-digicert-podcast Take the Cyber Insurance News 2026 survey. Respondents get the results first: https://s.surveyplanet.com/itpr6r59 Mike Nelson: linkedin.com/in/mike-nelson-70b408 DigiCert: https://www.digicert.com/Cyber Insurance News & Information: https://cyberinsurancenews.org Read: The Video Wasn’t Fake. Nobody Could Prove What Happened to It. That’s a Cyber Insurance Problem. cyberinsurancenews.org/digital-evidence-cyber-insurance-claims/ Music licensed through Soundstripe. Code: M8NZZEKEBQHWDQCI

  3. Sep 15

    The Ransom Bot Answers At 3AM

    Threat actors are using AI chatbots in ransom negotiations. They are not setting the price. Matthew Butler, Director of Cyber Risk Services at Travelers, tells Martin Hinton that the bots provide availability across every time zone, which compresses the early rounds of communication. What that removes is the hours a victim would otherwise spend standing up incident response, checking whether backups are clean, and working out what was actually taken. Butler calls it the automation of urgency rather than pricing. The pricing decision, he says, is still very human. The conversation covers the Q2 2026 Cyber Threat Report in full. Why The Gentlemen, a group absent from the data a year ago, posted 248 victims and now sits second only to Keelan. Why Butler describes the report's Mythos-class risk as a forecast rather than an observation. What session token theft does to multi-factor authentication, and why he calls MFA "definitely not the silver bullet that everyone says it is." Plus a half-million-dollar house purchase wired to a fraudulent account, and the full recovery that came from filing with the FBI's Internet Crime Complaint Center fast enough to freeze it. Referenced links in the show notes below. Guest: Matthew Butler, Director of Cyber Risk Services, Travelers https://www.linkedin.com/in/matthew-butler-38ba1b35/ https://www.travelers.com/ Take the Cyber Insurance News 2026 survey. Eight minutes, and respondents get the results first. https://s.surveyplanet.com/itpr6r59 Music licensed through Soundstripe. Code: MAQ6KOVCX9UOBXCJ

  4. Sep 8

    The AI Ransomware Attack - No Human At The Keyboard

    Shelterzoom co-founder and CEO Chao Cheng-Shorland on the first AI-executed ransomware attack, why healthcare keeps absorbing these incidents, and the 45-day cash problem that kills hospitals long after the systems come back. In this episode: The JadePuffer incident, where an AI agent hunted credentials, pulled cloud and AI provider API keys, and corrected its own failed login in seconds. Cheng-Shorland's view on how long before this is standard practice among ransomware operators: months, not years. Why hospitals pay, and why paying often does not get the data back. The 38% mortality increase during downtime. The three tiers of hospital response, from rural systems that cannot fund resilience to major brands fast-tracking it. And the underwriting question: multi-factor authentication and backups already earn pricing credits. Should demonstrable continuity capability do the same? JadePuffer: The First Successful LLM-Driven Ransomware - $10.5 Trillion German hospital hack - Irish Children's Hospital Jaguar/ Land Rover Hack - A $2.5 Billion Whodunit: The Hack That Dented the U.K. Economy

    The AI Ransomware Attack - No Human At The Keyboard

  5. Aug 25

    Who Owns This Password? Credential Management And Cyber Insurance With Chris Skipworth

    Multi-factor authentication proves a real person logged in. It never proves who owns the credential. Chris Skipworth, CEO of Passpack, joins Martin Hinton to talk about credential management and cyber insurance. The conversation covers credential sprawl, the offboarding failures behind most small business breaches, and why the insurance industry has an access problem of its own. Skipworth puts one question to business owners. How long would it take you to identify who owns which credentials? Most cannot answer it. Also in this episode: what AI changed for attackers, why browser password managers are a bad idea, where MFA stops being useful, and three steps a small business can take this week. Read the full article: https://cyberinsurancenews.org/credential-management-cyber-insurance-passpack/ CHAPTERS 00:00 Introduction 01:05 How the simple password became complicated 02:12 Security in the 1990s and what got skipped 06:39 What a credential actually means today 09:30 Offboarding and dormant credentials 12:41 The cost problem for small businesses 15:25 Credential sprawl and the question owners cannot answer 20:08 Human and non-human identity 24:20 Why insurance has an access problem 29:59 What AI changed for attackers 37:44 Friction, convenience and security 42:33 Cyber insurance and credential controls 46:27 Passkeys, MFA and what comes next 50:55 Default passwords and browser password managers 55:00 The human side of security 60:26 Three things to do on Monday morning Music licensed through Soundstripe.Code: 6VZLZBGCKQMDWBMW

  6. Aug 5

    Why "Do You Have MFA?" Is the Wrong Question

    A company tells its cyber insurer it has MFA. That answer is true. The claim still fails. Julien Richard, VP of Information Security at Lastwall, and Isabel Castillo, Lead InfoSec Operations Engineer at Lastwall, join Martin Hinton to take apart the cyber insurance application's most misleading question. Why a yes-or-no MFA question collects honest answers and prices nothing. What phishing-resistant authentication actually resists. How attackers take your session instead of your password. Why multi-factor and multi-step are not the same thing. And Richard's proposal for a live control dashboard that could replace the point-in-time audit. Covered in this episode: multi-factor authentication, phishing-resistant MFA, passkeys and FIDO2, adversary-in-the-middle attacks, session token theft, cyber insurance underwriting controls, security questionnaires, zero trust, least privilege, identity sprawl, and continuous control monitoring. Chapters 00:16 Introduction to MFA challenges and evolving threats 01:22 MFA Types and Strength 06:13 Why MFA Still Matters 08:49 Common MFA Implementation Gaps 14:09 How Attackers Bypass MFA 23:22 Phishing-Resistant Authentication and Passkeys 29:06 Passkeys, Friction, and Insurance Questionnaires 35:12 Identity Sprawl and Personal Devices 40:04 Zero Trust and Least Privilege 43:58 Evaluating MFA for Cyber Underwriting 48:27 Authentication Logs and Incident Response 53:50 MFA as Part of Layered Security 57:48 Reducing Risk Through Segmentation 1:00:14 Board Questions and Practical Takeaways 1:04:42 Closing Thoughts The Cyber Insurance News and Information podcast covers the underwriters, brokers and security leaders shaping the cyber insurance market. Read the full article Music licensed through Soundstripe. License code: VDAMY4ZV39WWXJII

  7. Jul 22

    Microsegmentation, Cyber Insurance & Poland's Cyberwar

    Microsegmentation. Poland's cyberwar. AI-powered attackers. The blast radius that decides your cyber insurance premium. Piotr Kupisiewicz, CTO of Elisity, joins Cyber Insurance News & Information to talk microsegmentation, but the conversation keeps returning to Poland: 270,000 cyberattacks in the past year, a civilian defense corps called Cyber Legion, and why hybrid warfare doesn't respect oceans. Along the way: what actually counts as critical infrastructure now, why segmentation works for mid-market companies too, how AI is lowering the bar for attackers on both sides, and the one question every board should ask its CISO about worst-case scenarios. Resources and links: Cyber Insurance News & Information Piotr Kupisiewicz on LinkedIn Elisity Chapters 00:00 Understanding Micro Segmentation 03:27 Cyber Warfare and Its Impact on Poland 06:28 The Broader Definition of Critical Infrastructure 10:21 The Reality of Cyber Attacks 12:29 The Water Treatment Facility Attack 15:31 Cyber Militia and Civil Service in Poland 18:35 AI's Role in Cybersecurity 20:58 Agentic AI and Responsibility 26:59 Shadow AI and Governance 31:05 The Importance of Critical Infrastructure 34:55 Advising Government on Cybersecurity Priorities 36:40 The Basics of Cybersecurity: Infrastructure and Human Factors 39:41 Human Error and Cybersecurity: The Overlooked Threat 41:48 The Importance of Routine in Cybersecurity 44:34 CISO Challenges: Balancing Security and Business Needs 47:54 Cyber Insurance: Financial Implications of Security Measures 49:54 Micro-Segmentation: A Solution for Mid-Sized Companies 53:27 Building Security from the Ground Up 56:35 The Submarine Analogy: Resilience in Cybersecurity 59:56 The Team Sport of Cybersecurity 01:02:23 Engaging Non-Technical Executives in Cybersecurity Discussions Follow Cyber Insurance News & Information for weekly coverage of the cyber insurance market, from underwriting to claims to the technology reshaping risk.

  8. Jul 9

    100% Compliant, Breached Anyway: Joshua Brown, CISO of Spektrum Labs, on Why GRC Failed

    "You can be a hundred percent compliant and still be breached." Joshua Brown, Chief Information Security Officer at Spektrum Labs, joins Martin Hinton to dismantle the industry's most expensive assumption: that passing an audit means being secure. Brown explains why GRC failed to deliver better security outcomes, why attestations expire the moment they're made, and what happens on the other 364 days of the year. The conversation covers the "cyber poverty line" facing small businesses, why insurers are suing MSSPs after client breaches, how continuous control validation could replace the questionnaire, the Sophos Insurability FastTrack partnership, and the elevator question every CISO dreads: "Are we secure?" Brown's answer, and the question he'd replace it with, closes the show. Key moments:02:05 — What is GRC and why has it failed?08:03 — The cyber poverty line17:00 — A flight recorder for resilience22:00 — Attestations vs. proof in cyber insurance45:01 — Small businesses and the security gap01:03:49 — The question CEOs should ask instead Read the full article at Cyber Insurance News & Information: https://cyberinsurancenews.org/cyber-insurance-joshua-brown-spektrum-labs-podcast/ Related coverage: Spektrum's Fusion platform launch, the Sophos partnership, and Max Perkins's January episode are all at cyberinsurancenews.org.

See All (53)

Trailers

Ratings & Reviews

5
out of 5
3 Ratings

About

The leading pure-play source for cybersecurity insurance news, insights and data, Cyber Insurance News (CIN) is produced by a team of award-winning journalists with decades of reporting experience, along with deep cyber and financial expertise and networks. Martin Hinton is your host and the Executive Editor of Cyber Insurance News. He is an award-winning journalist and storyteller with broad experience and a proven ability to distill complex ideas into compelling and impactful narratives across video, print, and digital media

Information

You Might Also Like