Resources

Supply chain risk is a critical threat within the cyber insurance market, but it has been widely under-investigated within the industry. This report aims to help insurers, brokers and clients better understand the exposures involved in cyber supply chain risk.

This report provides insights into the outlook of the global threat landscape for Q4 2023, detailing what (re)insurers should know about the evolving threats to come, including how nation-state cyber threat activity is affecting the market.

In this white paper, we will give an overview of the Ransomware-as-a-Service (RaaS) business model, outline our approach to identifying the highest-risk companies to a specific RaaS threat actor group, and share the results of this approach when applied to a proxy portfolio index.

This report details key takeaways from the MOVEit cyber attack that affected hundreds of companies globally. The (re)insurance industry must understand these attacks and how to best navigate future cybersecurity incidents like this.

[FRENCH AVAILABLE] Analyzing almost 17,000 French companies, this report highlights software and ransomware vulnerabilities and provides insights for brokers and underwriters active in the cyber market or considering entering it.

[ENGLISH AVAILABLE] Ce rapport met en évidence les vulnérabilités logicielles et aux ransomwares, et fournit des informations aux courtiers et aux assureurs actifs sur le marché cyber ou envisageant d’y entrer.

This report details a new approach to building a more nuanced and deeper understanding of technology dependencies datasets for the cyber (re)insurance industry.

As cyber (re)insurance matures, it's important that (re)insurers understand how to effectively navigate this risk. This report delves into what leading players in the market should know and how to utilize data and analytics to thrive in this space.

As part of CyberCube's ongoing efforts to understand the cyber threat landscape and cyber catastrophe events, the latest findings have been published and are the basis for CyberCube's the new version 5 of Portfolio manager.

This report explores the challenges faced by cyber underwriters in assessing cyber risks, the importance of cyber risk data and analytics in making informed decisions, and how insurers should utilize cyber risk signals in underwriting assessments.

This joint report from CyberCube and Cowbell highlights how cyber insurers can better understand their SME risk.

This report provides insight from some of the cyber security industry’s leading experts to augment the competence of your cyber insurance team, and is delivered as part of CyberCube’s Concierge service.

This report, a collaboration between CyberCube, Lockton Re and Envelop, explores the latest insights regarding cyber ILS and its potential for growth over the coming months.

This report aims to advise the (re)insurance and broking industry on the developments of the ESXiArgs attack to date and what actions they should take to advise their clients.

In this report, CyberCube's multi-disciplinary team of experts come together to share what they think will be the standout trends in 2023 to help you build a forward-looking view of risk.

In an era and market environment where vast amounts of data and analytics are available, it is critical to cut through the noise and focus on signals which provide the strongest predictive power to aid portfolio underwriting and account pricing activities.

As the war in Ukraine develops, a sovereign Russian internet could increase cyber risk, helping cyber threat actors to carry out larger attacks with fewer consequences.

CyberCube helps the insurance industry understand the key risks in today’s threat landscape. This report aims to enable more informed decision-making across broking, underwriting and reinsurance cyber policies.

Cyber portfolio management in a dynamic market can make it difficult for (re)insurers to achieve profitability. Mitigating cyber risk requires having the right framework in place, which can help portfolio managers better understand the cyber exposure of a portfolio.

Every year, a considerable amount of research is authored to raise levels of awareness concerning cyber security attack methods, criminal trade-craft and possible outcomes resulting from malicious activity. In our view, not enough of this research focuses on the threat actors carrying out these attacks.

Evaluating Cyber Risk Signals as Indicators of Future Incidents presents the latest findings in CyberCube’s continuous effort to identify, understand, and improve the data and analytics we present to our clients.

Developing cyber catastrophe scenarios: key components (re)insurers need to build a model outlines how CyberCube approaches the development of cyber catastrophe scenarios to define and quantify realistic scenarios that could occur.

War in Ukraine creates a fundamental shift in the cyber threat landscape analyzes the cyber events accompanying the Russian invasion of Ukraine and the potential implications for the (re)insurance industry.

This report analyzes the cybersecurity threat landscape, its important characteristics and their potential impacts on cyber insurance. CyberCube provide a nation state level cyber threat activity update and review current criminal cyber threat actor activities, as well as predict what to expect in the first six months of 2022.

The cyber threat landscape is constantly changing, which is why it's vital for (re)insurers to stay ahead of cyber trends. In our Cyber Predictions 2022 report, we hear about the trends that experts in the industry think (re)insurers need to be paying attention to over the next year.

Spotlight on Cyber: A study of aggregation risk in the US property insurance market aims to quantify the cyber exposures accumulating in the US property market and calls for further clarification of cyber cover in commercial property policies, explicit underwriting and adequate pricing of the risks associated with cyber events in property policies.

The goal of this study is to provide insight into the relationships between a selected set of cyber risk signals and their relationship to cyber incidents. We focus on establishing the value of individual risk signals in isolation and not in aggregate. This paper aims to establish which cyber signals are meaningful, as well as quantify the relative value of each risk signal.

The report identifies growing similarities between cyber ransomware attacks and the kidnap trade. Among these is the rise of so-called cyber cartels – gangs of cyber criminals organised along the lines of drug cartels. These cartels are changing the ‘rules’ of ransomware to keep ahead of the authorities’ efforts to thwart their activities.

With major attacks such as Microsoft Exchange, Blackbaud and SolarWinds making headlines over the past year, CyberCube analyses how supply chain cyber risk has shifted from an identified risk area to become a key topic of interest in the security and insurance industries.

CyberCube analyses the threat for the insurance industry from recent cyber attacks by criminals on the servers running Microsoft’s best-selling email services.

A Lloyd’s, Guy Carpenter and CyberCube Analytics collaboration provides an original analysis of potential cyber attack pathways to an industrial target. Cyber risk is continually evolving, meaning insurers should understand emerging risks in order to keep pace with their clients' exposures.

Darren Thomson, Head of Cyber Security Strategy at CyberCube, depicts the social engineering trend used by cyber criminals, bringing their techniques to new levels in terms of both scale and sophistication.

The impact of the COVID-19 pandemic has dramatically influenced every aspect of how we live, work and think about systemic risk. Cyber risk models aim to understand and articulate the systemic risk potential arising from the increasingly hyper-connected technological world in which we operate both in our economy and wider society. Oliver Brew, Head of Client Success, examines the lessons that can be learnt and applied to cyber risk modeling from understanding how pandemic models have evolved.

What are the changes to our digital landscape that have been encouraged by the COVID-19 pandemic and subsequent social distancing measures?

The digital transformation of the last several decades has changed our lives in such numerous and powerful ways that it has been termed the Information Revolution, following the Industrial Revolution as the most recent impactful shift in the way humans live and interact with each other.

With the wealth of data available to companies and their insurer partners, there should be enough information to tailor specific insurance cover to any organizations’ needs. However, upon deeper analysis, there are several structural factors across the market that contribute to this inefficiency and under-protection of corporations.

The creation of risk scenarios is one of the most important, complex and (for many) interesting aspects of risk management in the insurance sector...

The ransomware threat has evolved significantly over the past few years, as attackers grow in confidence and explore different approaches...

The cyber insurance market can learn lessons from the experiences of the natural catastrophe insurance industry, although the unique characteristics of cyber risks mean that there are as many differences as there are similarities for this risk compared to natural catastrophe modeling...

The global economy is racing to digitize its service and product offerings and this “Fourth Industrial Revolution” has far-reaching implications for society...

Recent developments in the Middle East and rising political tensions with the US are leading military and cyber experts to speculate on the opening up of a new front in cyber warfare...

For the past 20 years, the capital markets have offered crucial capacity for certain catastrophe-prone perils and regions where traditional insurance and reinsurance capacity has been hard to secure at acceptable terms and conditions...

Against a backdrop of increasing interconnectivity, the need to accurately price cyber risks, understand gross and net exposures, and gain deeper insight to steer underwriting towards better exposure controls and profitability is paramount...

Our digital future will be determined by permutations of technological, political, business, cultural, military and societal developments that will reshape the economy, society and therefore risk management...