“Nation-state cyber threat actors conduct themselves in ways that push the cyber (re)insurance industry to consider the limitations and strengths of current war-exclusion language deeply,” according to cyber risk analytics specialist CyberCube.
These comments stem from a new report in which CyberCube examined selected nation-state cyber hot zones to gain insight into the potential cyber (re)insurance impacts of future cyber wars.
“CyberCube monitors these hot zones for evidence of cyber attacks bridging the divide between digital and physical impacts,” the firm explained.
The report specifically analysed state-nexus cyber threat actors in Russia/Ukraine, China/Taiwan, Iran/Israel, and North Korea/South Korea.
William Altman, Cyber Threat Intelligence Principal, CyberCube, commented, “Nation-state cyber hot zones offer a glimpse into the potential future of cyber war.
“In Q4 2023, CyberCube expects to see nation-state cyber threat actors conduct themselves in ways that push the cyber (re)insurance industry to consider the limitations and strengths of current war-exclusion language deeply.”
According to the research, the highest-risk sectors to “keep an eye on” in Q4 include Professional Services and Healthcare, which CyberCube says are both under-secured relative to the threats they face and make attractive targets, with high levels of sensitive data — leaving companies vulnerable to ransomware and extortion tactics.
The report notes that while there has been substantial progress and momentum achieved this year, including, in March, Lloyd’s of London rolling out an exclusion for cyber war and severe state-backed attacks, the reinsurance market is “yet to settle on a consistent approach that is acceptable to all stakeholders.”
Yvette Essen, CyberCube’s Head of Content, Communications & Creative, said, “The approaches currently being adopted carry significant uncertainty, mainly due to the complexities surrounding the attribution of cyber incidents and the scarcity of historical parallels.
“By striving for consistency and clarity, we can bolster confidence in the cyber reinsurance sector, shielding it from the impact of outlier events, while reinforcing the overall value of cyber insurance products.”
