Illustration of three server cabinets connected to a shared cable with a gap in it.

RISK RADAR · THEME

Cyber

Systemic or accumulation cyber events, ransomware and extortion trends, attacks on critical infrastructure, cloud and IT outages, cyber war, the limits of cyber insurability.

ARGUS’S READING Rising · PHP vulnerabilities, reported attacks and precautionary shutdowns expose shared software dependencies across cyber portfolios.

AI and technologyClimate and natureGeopolitics, conflict and tradeCyberEnergy and the transitionSocial and legalFinancial and macroHealth, pandemics and longevityNatural resources and foodUnder the radar

Illustration

Risk & Catastrophe

AM Best warns the PHP flaws could become a systemic cyber event, with losses reaching D&O cover

Rating agency AM Best says the critical PHP vulnerabilities disclosed this month could become a systemic event for cyber insurers, Carrier Management reported. It says insured losses could extend into directors' and officers' cover, because regulators in the EU and the US set reporting and patching requirements. AM Best also expects claims to emerge over a long period and a large gap between economic and insured losses.

  1. Business InsuranceCyber

    NowClaims and pricing

    Jaguar Land Rover cyberattack was state-sponsored, ex-minister says ↗

    State-backed attack causing £2.1bn losses tests cyber war exclusions and accumulation limits for cyber insurers.

  2. Reinsurance NewsCyber

    NowClaims and pricing

    AM Best warns PHP vulnerabilities could pose systemic risk for cyber insurers ↗

    Shared web software flaws could cause correlated cyber losses across many insured firms at once.

  3. Insurance TimesCyber

    NowClaims and pricing

    Briefing: Cyber risks widen the economy-state protection gap ↗

    Cyber risk is widening the protection gap, signalling more uninsured exposure and harder cyber pricing for insurers.

  4. Insurance JournalCyber

    NowClaims and pricing

    PHP Security Flaws Highlight Potential Systemic Risk Aggregation for Cyber Insurers ↗

    Shared software flaws create cyber accumulation risk, making insurers cautious about expanding appetite.

  5. Insurance Business (New Zealand)Cyber

    NowClaims and pricing

    Third-party cyber risk exposed by ZenTech ransomware breach ↗

    Vendor ransomware breach highlights third-party supply-chain cyber accumulation risk for insurers.

  6. Insurance Business (Canada)Cyber

    1–3 yrsClaims and pricing

    If a fridge can be hacked, insurers should brace for a bigger surprise, Aviva exec warns ↗

    A device breach could hit many insureds at once, signalling cyber accumulation risk across consumer products.

  7. Our briefCyber

    NowClaims and pricing

    CyberCube expects PHP2Shell claims to arrive slowly, and Crawford warns that patching outages may not be covered

    An unpatched-server flaw may bring delayed, accumulating cyber claims, and patching-related outages may fall outside cover.

  8. Insurance JournalCyber

    NowClaims and pricing

    Ransomware Attacks Rise 50% in Q3, Says NordLayer ↗

    Rising ransomware volumes raise claims frequency for standalone and embedded cyber cover.

  9. Insurance Asia NewsCyber

    NowClaims and pricing

    ‘You can’t fix what you can’t see’: cyber insurers warn PHP2Shell website shutdowns highlight AI impact ↗

    AI-accelerated vulnerability discovery widens cyber visibility gaps and systemic shutdown risk for cyber insurers.

  10. Intelligent InsurerCyber

    NowClaims and pricing

    Ransomware attackers skip encryption to extort victims: Beazley Security ↗

    Ransomware shifting to extortion without encryption changes cyber claim patterns and loss assumptions.

  11. Insurance EdgeCyber

    NowClaims and pricing

    Micro Biz Owners Face a Growing Cyber Threat; Can Insurers Create Affordable Cover? ↗

    AI-agent attacks on small firms may push cyber cover toward unaffordability for micro businesses.

  12. Our briefCyber

    NowClaims and pricing

    PHP2Shell flaws prompt security alerts as security firms report attacks

    Widely used PHP flaws under active attack create accumulation exposure across websites and cyber cover.

  13. The Guardian (AI)Cyber

    NowClaims and pricing

    ‘Black October’: cybersecurity experts sound the alarm over new era of AI-enabled hacking ↗

    AI-enabled hacking is raising alarm about faster, more scalable cyber attacks on insured businesses.

  14. cybersecuritydive.comCyber

    NowClaims and pricing

    Large businesses’ cybersecurity insurance claims are now less frequent but more expensive ↗

    Cyber losses are becoming fewer but costlier per claim, pressuring large-account cyber pricing and limits.

  15. BBC News (technology)Cyber

    NowClaims and pricing

    What is PHP and why did it spark a global cyber-security scramble? ↗

    A widely exploited PHP flaw sparking a global scramble signals systemic cyber accumulation risk for insurers.

  16. TechCrunch (AI)Cyber

    NowClaims and pricing

    Chinese hackers spied on thousands of companies after breaching IT giant ConnectWise ↗

    A supplier breach let state hackers reach thousands of firms, an accumulation cyber event.

  17. insuranceNEWS.com.auCyber, Property and catastrophe

    NowClaims and pricing

    ‘Patch frenzy’: PHP web security panic may bring BI claims ↗

    A widespread PHP flaw could trigger business-interruption claims, testing where cyber and property cover overlap.

  18. BBC News (technology)Cyber

    NowClaims and pricing

    Websites taken down worldwide as critical cyber-security update issued ↗

    Mass exploitation of a widely used web flaw creates accumulation cyber exposure across many insureds at once.

  19. Insurance Business (US)Cyber

    NowClaims and pricing

    NSA warns of critical website flaw as Wikipedia, European government websites taken offline ↗

    Mass exploitation of a widely used web flaw creates accumulation cyber exposure across many insureds at once.

The daily briefing