Cyber Insurance News & Information Podcast

Marketing data security is a CMO's problem. Graylog CMO Kimber Spradlin returns to explain how cheap plugins, tracking pixels and AI tools add risk, and why every CMO should know their CISO.Marketing holds a lot of customer data across a lot of systems. Spradlin covers what that data is, how the pieces add up to a profile, and where the risk hides in the martech stack. She explains why the CISO is often the last executive a CMO talks to, what a breach does to a brand, and why marketing should help answer the cyber insurance application.Her advice for any CMO who doesn't know the CISO: "Find out for sure. That's step one."Read the article: www.cyberinsurancenews.orgWatch on YouTube: https://youtu.be/eNyKM6mB2G0Kimber Spradlin on LinkedIn: https://www.linkedin.com/in/kimberspradlin/Graylog: https://graylog.org/Music licensed through Soundstripe. Code: QQH8JXADVPZQ13NA

Think like a criminal. Act like an angel. Twenty-six years in cybersecurity led Jonathan Palmer, CEO of CDL Cyber Intelligence, to that motto.Criminals case a target before they strike. Palmer explains how dark web monitoring shows them doing it, often months before an attack lands. A Marsh McLennan study with Searchlight Cyber found organizations with compromised accounts on the dark web were about 2.5 times as likely to suffer a cyber incident.Palmer also tells the story of how a cup of tea in a Leeds basement started his career in encryption. He explains why a five-person yoga studio and a global company can fall for the same fraud, and why attackers often go after your suppliers instead of you.For the insurance market, Palmer argues dark web intelligence can give underwriters a sharper view of risk than a self-certified questionnaire. He also covers what CISOs struggle to tell their boards, why tabletop exercises matter, and why shadow AI is the first thing to audit in 2026.Read the article: https://cyberinsurancenews.org/dark-web-monitoring-cdl-cyber-palmer-podcast/Jonathan Palmer on LinkedIn: https://www.linkedin.com/in/jonathan-palmer-1320551/CDL Cyber Intelligence: https://www.cdlcyber.com/More on the Marsh McLennan and Searchlight Cyber study: https://cyberinsurancenews.org/dark-web-exposures-impact-on-cyber-insurance-risk-report/This episode is brought to you in association with CDL Cyber Intelligence.Cyber Insurance News & Information: https://cyberinsurancenews.orgMusic licensed through Soundstripe. Code: 7CEKYW07HOJ6UWLM

A defense supplier was compliant on paper from January to May. In June, it moved its servers from France to Germany and opened more than 17,000 ports. Nobody had to tell the auditors.Andrew Horkan, CEO of Cyber Tzar, tells Martin Hinton why compliance is a snapshot and security is continuous. He explains what an outside-in scan can see from the public pavement, how Cyber Tzar's 0-to-999 score is built, and why brokers are starting to ask for remediation before they bind.The conversation also follows the Jaguar Land Rover attack two steps down the supply chain, to a family hauler that lost 390,000 pounds in its first month and never saw government support. And it closes on a plan to score every active domain on the internet at least once a quarter by 2028.Guest: Andrew Horkan, CEO, Cyber Tzarhttps://uk.linkedin.com/in/andrew-horkanhttps://cybertzar.com/This episode is brought to you in association with Cyber Tzar and Source Consulting.Referenced in this episode:Martin Hughes, Source Consulting: https://www.linkedin.com/in/martin-hughes-59897a43/Cyber Essentials (NCSC): https://www.ncsc.gov.uk/cyberessentials/overviewMinor ID theft Podcast: https://youtu.be/cogg7NlmYk8?si=WMZKCxDIFujU5I6QTake the Cyber Insurance News 2026 survey. Eight minutes, and respondents get the results first.https://s.surveyplanet.com/itpr6r59Music licensed through Soundstripe.Codes: KVAVCLTJATQTULH7, D5PIVNBS5SNZQ0ON

Claim photos, MRIs, contracts: if nobody can prove a digital record is authentic and unchanged, somebody still pays. DigiCert's Mike Nelson explains how content provenance and the C2PA standard track where a file came from and every change made to it.Martin Hinton, executive editor of Cyber Insurance News & Information, talks with Mike Nelson, vice president and field chief technology officer at DigiCert, about:• The Utah courtroom video that raised the question every claims adjuster should be asking• Why digital files lack the provenance the antiques trade has relied on for centuries• How C2PA digital signatures and the trust list create a chain of custody• A parking-lot fender-bender, and how easy AI makes it to fake claim damage• Why hospital imaging machines in service for 20 years are still a weak point• Why today's credentials can identify the camera but not the person holding itRead the article and download the transcript: cyberinsurancenews.org/content-provenance-liability-digicert-podcastTake the Cyber Insurance News 2026 survey. Respondents get the results first: https://s.surveyplanet.com/itpr6r59Mike Nelson: linkedin.com/in/mike-nelson-70b408DigiCert: https://www.digicert.com/Cyber Insurance News & Information: https://cyberinsurancenews.orgRead: The Video Wasn’t Fake. Nobody Could Prove What Happened to It. That’s a Cyber Insurance Problem. cyberinsurancenews.org/digital-evidence-cyber-insurance-claims/Music licensed through Soundstripe.Code: M8NZZEKEBQHWDQCI

Threat actors are using AI chatbots in ransom negotiations. They are not setting the price.Matthew Butler, Director of Cyber Risk Services at Travelers, tells Martin Hinton that the bots provide availability across every time zone, which compresses the early rounds of communication. What that removes is the hours a victim would otherwise spend standing up incident response, checking whether backups are clean, and working out what was actually taken.Butler calls it the automation of urgency rather than pricing. The pricing decision, he says, is still very human.The conversation covers the Q2 2026 Cyber Threat Report in full. Why The Gentlemen, a group absent from the data a year ago, posted 248 victims and now sits second only to Keelan. Why Butler describes the report's Mythos-class risk as a forecast rather than an observation. What session token theft does to multi-factor authentication, and why he calls MFA "definitely not the silver bullet that everyone says it is."Plus a half-million-dollar house purchase wired to a fraudulent account, and the full recovery that came from filing with the FBI's Internet Crime Complaint Center fast enough to freeze it.Referenced links in the show notes below.Guest: Matthew Butler, Director of Cyber Risk Services, Travelershttps://www.linkedin.com/in/matthew-butler-38ba1b35/https://www.travelers.com/Take the Cyber Insurance News 2026 survey. Eight minutes, and respondents get the results first.https://s.surveyplanet.com/itpr6r59Music licensed through Soundstripe.Code: MAQ6KOVCX9UOBXCJ