LATEST POST
Vendor risk tests the boundaries of cyber cover
Insurance Business Magazine considers the question of whether a firm’s cyberinsurance will cover a breach at its vendor. The detail that matters for insurance brokers is not that a breach occurred – it is how. Ryan Specialty’s 2026 analysis of Dependent Business Interruption (Dependent BI) coverage puts the structural problem plainly: “Each of these events […]
Hollard rejects hacking claim, points to MIP cyber breach
Threat actors may claim to have hacked an entity when the reality is that they hacked the entity’s vendor. This is one of those instances. iTWeb reports: Insurer Hollard has rejected claims that its IT systems were hacked, saying a threat actor’s allegations stem from a cyber incident at a third-party service provider. This, after […]
Coupang rejects 100,000 won payouts for some data breach victims
The Coupang data breach has been one of South Korea’s biggest, and government regulators and the firm continue to disagree over how Coupang should compensate victims. Now the Korea JoongAng Daily reports that the firm is rejecting a proposal to compensate 50 victims 100,000 won ($73) each for emotional distress suffered. With tens of millions of victims […]
Revolut Data Breach Hits 680 Customers, UK Opens Probe as Hackers Demand 10,000 Bitcoin
The Crypto Times reports Revolut has confirmed that approximately 680 customers were affected in the customer-data disclosure incident: The 680 figure was first reported by the Financial Times, which described the group as “nearly 700.” A source close to the bank confirmed the number to City AM, which said Revolut had contacted all affected customers […]
AI agents being tested by OpenAI involved in cyber-attack on another service, say researchers
The Guardian reports that months before the Hugging Face incident made worldwide headlines and triggered investigations by state regulators, there was another attack by Open AI agents on a second service: Agents being tested by OpenAI uploaded hundreds of malicious packages in a cyberattack on software service RubyGems in May, two months before they hacked […]
FBI releases cyber strategy
On September 9, the FBI released its new cyber strategy. “The FBI’s new Cyber Strategy is a roadmap for defending the American people and the nation’s critical infrastructure in cyberspace. The strategy focuses on four pillars: disrupting adversaries, supporting victims, strengthening partnerships, and building the capabilities this mission demands. Together, these four pillars bring the […]
New York State Department of Financial Services Issues New Cybersecurity Guidance on Risk Assessments for Financial Services Entities
Guidance Emphasizes Importance of Ongoing Risk Assessments and Reminds Entities of Compliance Obligations Under Nation-Leading Cybersecurity Regulation September 10, 2026 New York State Department of Financial Services (DFS) Acting Superintendent Kaitlin Asrow today issued new cybersecurity guidance outlining the Department’s expectations for DFS-regulated entities’ on conducting risk assessments sufficient to inform their cybersecurity programs. The […]
Revolut Gave Customer Data to Scammers Using Government Domain
Revolut is a global digital banking and fintech platform that is headquartered in the U.K. And to their embarrassment, they handed over personal and sensitive customer data to scammers who used a government email domain to trick them. HackRead reports: The incident did not involve attackers breaching Revolut’s systems. Instead, the fraudulent requests came from […]