Korean firms buy cyber insurance only up to the privacy law's minimum
Only 153 of the 2,486 new cyber policies Samsung, DB, Hyundai, KB and Meritz wrote in the first half, or 6.2%, covered breach response and recovery. More than nine in ten were the liability cover Korea's privacy law requires, so companies pay for breach investigation and data recovery themselves.
Reality
- Evidence55
- Adoption12
- Hype gap+10
- Incentives60
- Confidence55
Andover confirms its August attacker got inside town systems
Andover officials confirmed an attacker reached some town systems in the Aug. 13 cyberattack but still cannot say whether any data was taken. The town has set no date for finishing the review that decides who gets notified.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+5
- Incentives60
- Confidence55
Four-year payment-diversion campaign drained 35 million euros from 7% of French notary offices
French notaries lost the money to intruders who lived on their networks and edited payment details before the instructions went out, which is why bank-side verification kept waving the transfers through.
Reality
- Evidence55
- Adoption40
- Hype gap+5
- Incentives
- Not scored
- Confidence55
Insurers write AI-agent losses out of corporate policies while cutting cyber rates
Insurers won regulatory approval for more than 80% of their requests to exclude AI-related damages from corporate policies, according to a CSIS analysis. Companies deploying AI agents now hold losses their insurers have decided not to price.
Reality
- Evidence40
- Adoption40
- Hype gap+20
- Incentives
- Not scored
- Confidence35
Spain's first AI-agent breach notice rests on the reporting organisation's word
Spain's AEPD disclosed its first breach notice naming an AI agent as the reported attacker, based on an account the regulator has not verified. Read with cases in Australia and a coding-agent test, it puts the cost for insurers and security teams in the permissions each agent holds.
Reality
- Evidence35
- Adoption
- Not scored
- Hype gap+20
- Incentives60
- Confidence40
The tenth annual Cyber Readiness Report surveyed nearly 7,000 smaller businesses, 1,000 of them in the UK, and Britain came out with the highest successful-attack rate of any market in the study, at an average $35,908 per incident.
Reality
- Evidence55
- Adoption40
- Hype gap+15
- Incentives60
- Confidence55
FBI logged 22,000 AI-linked fraud complaints in its first year of counting them
The bureau's 2025 total of roughly $893 million comes only from victims who filed and from cases where investigators could identify the AI, and two of its subtotals overlap enough to exceed it. It is a floor.
Reality
- Evidence55
- Adoption58
- Hype gap+15
- Incentives60
- Confidence45
Arctic Wolf's incident response lead wants the ransom ceiling signed before the intrusion
Kerri Shafer-Page of Arctic Wolf sets out four ransomware decisions in a Help Net Security video, each needing a named owner and, in the case of the payment ceiling, a number approved in advance.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+12
- Incentives70
- Confidence55
Echo bought Minimus's enterprise customer contracts after the container vendor wound down
SecurityWeek logged 33 cybersecurity acquisitions in August 2026. Two of them took technology assets out of small vendors instead of buying the vendors, and only Kiteworks' move into Japan promised customers unchanged contracts and pricing.
Reality
- Evidence56
- Adoption31
- Hype gap+12
- Incentives54
- Confidence51
buildOne report1 publisher Attackers rewrote wire details inside 500 French notary offices for four years
France's ANSSI spent two years quietly evicting a crew that had been altering payment instructions inside notary networks. The procedural fix that landed takes bank details off email rather than checking whether they changed.
Reality
- Evidence45
- Adoption58
- Hype gap−20
- Incentives42
- Confidence50
Munich Re pays $575mn for At-Bay, and the "insurance plus security" premium vanishes
The cyber insurtech sold for about 43% of its 2021 valuation, roughly two times gross written premiums. SMB policyholders now wait until 2027 to land inside a reinsurer's specialty unit.
Reality
- Evidence58
- Adoption66
- Hype gap+12
- Incentives74
- Confidence55
buildOne report1 publisher Munich Re's reported $575M for At-Bay reprices cyber underwriting, if the deal is real
Reuters puts the enterprise value about 57% below At-Bay's 2021 financing mark. Munich Re's own annual report still calls the relationship an investment.
Reality
- Evidence32
- Adoption38
- Hype gap+28
- Incentives58
- Confidence36