Second Wave of Cyber Insurance

The blog describes the cyber insurance "second wave," where carriers and brokers increasingly focus on measuring and managing external exposure—reporting that a large share of intrusions result from internet-exposed vulnerabilities and external exploits (e.g., Log4Shell). It urges organizations to prioritize patching, multi-factor authentication, external scanning, and stronger security controls to meet underwriting requirements, close protection gaps, and improve insurability.