By Ryan Windt | Head of Growth Marketing | Updated June 2026 Most security programs are built to stop attacks that arrive by email or through software. Vishing works because it arrives by phone, where there is no spam filter, no link to scan, and no attachment to detonate in a sandbox. Just a human […]
Category: Cyber Threats & Incident Analysis
By Ryan Windt | Head of Growth Marketing | Updated June 2026 Email security has gotten significantly better at catching phishing links. Secure email gateways scan URLs, sandbox suspicious attachments, and flag known malicious domains before they reach an inbox. Attackers noticed. Quishing is the response. Instead of embedding a malicious link directly in an […]
By Ryan Windt | Head of Growth Marketing | Updated June 2026 For years, the conventional ransomware narrative positioned MSPs as collateral damage. A client gets hit, the MSP gets pulled into the response, maybe a lawsuit follows. That framing was always incomplete, and by 2025 and into 2026, it stopped being accurate at all. […]
By Ryan Windt, Head of Growth Marketing For years, multi-factor authentication was the answer. If a carrier asked whether your organization had MFA deployed, and you said yes, that was usually enough. The box was checked. The conversation moved on. That era is ending. A class of attack called Adversary-in-the-Middle phishing, or AiTM phishing, has […]
By Ryan Windt | Head of Growth Marketing | Updated June 2026 In February 2024, attackers affiliated with the ALPHV/BlackCat ransomware group accessed a single Citrix remote access portal at Change Healthcare. The portal had no multi-factor authentication. Nine days later, they deployed ransomware. What followed was the largest cyber event in U.S. healthcare history. […]
By Ryan Windt | Head of Growth Marketing | Updated June 2026 Business email compromise was already the highest-loss cybercrime category in the United States before artificial intelligence entered the picture. The FBI’s 2025 IC3 report put BEC losses at $2.77 billion across more than 21,000 complaints. That number was built largely on old-fashioned social […]
By Ryan Windt | Head of Growth Marketing | Updated May 2026 Most businesses buy cyber insurance hoping they never have to use it. But when a ransomware attack hits, a breach notification lands in your inbox, or a wire transfer disappears into a fraudulent account, the policy you bought suddenly becomes the most important […]
By Kyle Sawdey, CRO & EVP of Underwriting, SeedPod Cyber | June 2026 In early January, the Crimson Collective extortion group posted to Telegram claiming they had stolen the personal data of more than one million Brightspeed customers. Names, email addresses, phone numbers, billing addresses, service records, partial payment card data, account status. Brightspeed, a […]
By Kyle Sawdey | CRO & EVP of Underwriting | Updated May 2026 By now, most people in our industry have seen the headlines. Stryker, a Fortune 300 medical device giant with $25 billion in revenue, had its global Microsoft environment hit by a destructive wiper attack on March 11. Over 200,000 endpoints wiped. 50 […]
By Ryan Windt | Head of Growth Marketing | Updated May 2026 For years, cyber risk conversations focused on stolen data. How many records were exposed? Was customer information compromised? What were the notification costs? That framing is now outdated. Business interruption has overtaken data theft as the single largest financial driver of cyber insurance […]
By Ryan Windt | Head of Growth Marketing | Updated June 2026 Every April, the FBI’s Internet Crime Complaint Center publishes its annual report on cybercrime losses across the United States. Every year, the numbers get worse. The 2025 IC3 Annual Report is no exception, and this year the numbers crossed a threshold that nobody […]
By Ryan Windt | Head of Growth Marketing | Updated April 2026 Phishing is the starting point for most of the cyber incidents that end up as insurance claims. It is how ransomware gets in. It is how business email compromise begins. It is how credentials get stolen, accounts get compromised, and wire transfers go […]
By Ryan Windt | Head of Growth Marketing | Updated May 2026 Ransomware insurance is the part of a cyber policy that responds when attackers encrypt your systems, demand payment, and leave your operations at a standstill. Most businesses think about ransomware in terms of the ransom demand. That is usually the smallest part of […]
By Ryan Windt | Head of Growth Marketing | Updated May 2026 In September 2023, two of the largest casino and hospitality companies in the world were compromised within weeks of each other. Caesars Entertainment reportedly paid a ransom of around $15 million to prevent the release of stolen data. MGM Resorts did not pay, […]
By Ryan Windt | Head of Growth Marketing | Updated June 2026 In August 2022, LastPass detected unauthorized access to its development environment. By December of that year, the company disclosed that attackers had exfiltrated a backup of customer vault data along with unencrypted metadata including website URLs, usernames, and billing information. The vault contents […]
The answer is yes. Here’s why – and specific steps to mitigate the threats.
The truth is that, despite dramatic plot-lines in movies and news stories, the most common cybersecurity threat isn’t from shadowy, skilled hackers, but from all-too-human mistakes and weakness within your organization.