Watch · Next 2 Weeks
→Kairos non-encrypting extortion targeting public entities
→Unpatched FatFs flaws in IoT/OT devices
→North Korean npm/supply-chain package proliferation
Threat Landscape
Data-theft extortion and supply-chain compromise dominate, with encryption-free models and embedded-device flaws widening exposure.
U.S. Government Entity Paid Kairos ~$1M in Data-Theft Extortion
A U.S. government entity paid roughly $1 million to prevent leakage of stolen files, per a Ransom-ISAC case study built on a leaked negotiation chat and blockchain payment trail. The group Kairos calls itself ransomware but shows no evidence of ever encrypting a system, operating purely on data-theft extortion.
Market Implication
Pure data-exfiltration extortion without encryption pressures cyber policies to trigger on privacy/breach-response and extortion coverage rather than business-interruption, complicating public-entity account pricing.
North Korean PolinRider Campaign Publishes 108 Malicious Packages
Threat actors linked to the Contagious Interview campaign published 108 unique malicious packages and browser extensions across npm, Packagist, Go, and Chrome. A separate NK-linked set of npm packages impersonated Rollup polyfill tooling to enable remote access and steal developer secrets, per JFrog.
Market Implication
Software supply-chain and developer-credential compromise raises aggregation risk across tech E&O and cyber portfolios where dependencies span many insureds.
Bad Epoll Linux Kernel Flaw (CVE-2026-46242) Grants Root, Hits Android
A newly disclosed Linux kernel privilege-escalation flaw lets an unprivileged user gain root on desktops, servers, and Android; a fix is available. Separately, runZero disclosed seven unpatched vulnerabilities in FatFs, a filesystem library embedded in cameras, drones, industrial controllers, and hardware crypto wallets.
Market Implication
Widespread kernel and embedded-firmware exposure affects large server fleets and IoT/OT device portfolios; unpatched FatFs flaws elevate physical-device and industrial-control risk with no immediate remediation.
Avalon Modular Malware Framework Bundles CrownX Ransomware
Researchers discovered Avalon, a previously undocumented modular framework distributed via multi-stage phishing that bypasses traditional controls. It combines credential collection, lateral movement, remote access, recovery disruption, and ransomware execution in a single toolset.
Market Implication
Integrated frameworks with recovery-disruption capabilities threaten backup-dependent recovery assumptions, increasing severity on ransomware and business-interruption claims.
US Insurance Market
Market Condition
US property and reinsurance conditions remain buyer-favorable amid record capital and soft pricing.
Cedents Find Softening at Midyear Reinsurance Renewals
Reinsurance brokers report record capital levels and strong reinsurer profits driving increasing risk appetite and softening prices at midyear renewals. Abundant reinsurer capacity continues in the traditional property market.
Market Implication
Buyer-favorable conditions support broader property treaty terms and lower rates-on-line, pressuring reinsurer margins into the second half.
AM Best Revises LWCC Outlook to Positive
AM Best revised outlooks to positive from stable and affirmed the A (Excellent) FSR and 'a+' Long-Term ICR of Louisiana Workers' Compensation Corporation.
Market Implication
Improved outlook signals stable workers' comp underwriting performance in the Louisiana single-state segment.
Texas Petrochemical Plants May Not Be Ready for Fiercer Storms
Reporting highlights Gulf Coast petrochemical facilities' preparedness gaps against intensifying storms, referencing prior storm damage in the region.
Market Implication
Concentrated Gulf Coast industrial property and energy exposures face rising cat severity, relevant to property and BI accumulation modeling.
Big Tech Carbon Emissions Spike With AI Growth
Greenhouse gas emissions of Amazon and Alphabet's Google spiked in 2025 as AI energy demand grows, undermining stated climate goals.
Market Implication
Divergence between climate commitments and emissions raises ESG-disclosure and greenwashing litigation exposure relevant to D&O for hyperscalers.
International Market
Market Condition
Alternative capital and AI automation expand while reinsurers face continued rate declines with no near-term floor.
Sidecar Reserves Exceed $90bn in 2025: AM Best
AM Best reports sidecar formation increased significantly in 2025, driven by strong U.S. annuity sales, with total reserves ceded rising above $90 billion from $55 billion in 2023.
Market Implication
Rapid life/annuity sidecar growth expands alternative capital in reinsurance, affecting counterparty concentration and reserve-adequacy scrutiny.
JP Morgan: No Near-Term Floor on Reinsurance Pricing
Despite lower Q2 2026 catastrophe claims aiding profitability, JP Morgan expects reinsurance pricing pressure to intensify, citing a forecast lighter-than-average Atlantic hurricane season due to El Niño.
Market Implication
Sustained rate declines compress reinsurer margins and reinforce buyer leverage into upcoming renewals across property cat treaties.
Aon: Reinsurers Offered Flexible Structures at US Property Midyear
Aon reports reinsurers increasingly willing to offer flexible structures and broader coverage at US property mid-year 2026 renewals, enabling insurers to use more tailored solutions as conditions remained favourable for buyers.
Market Implication
Broader terms and structural flexibility signal a softening property reinsurance market, supporting cedent retention optimization.
Four in Ten Insurers Now Use AI in Underwriting: Sollers
Sollers Consulting research finds 40% of insurers now use AI in underwriting, driven by competitive pressure, a softening market, and rapid AI advances, marking a strategic digitalization priority.
Market Implication
Accelerating underwriting automation shifts operational-risk and model-governance exposure, relevant to tech E&O and professional liability for carriers.
Tech & Automation
Insurtech consolidation and AI-centric platforms advance alongside notable transactional-insurance disputes.
Prudential Seeks $135M From R&W Insurers Over Assurance IQ Deal
Prudential is pursuing $135 million from representations & warranties insurers tied to the Assurance IQ acquisition. Parties mediated in November 2024 but failed to resolve the dispute.
Market Implication
Large R&W claim highlights severity potential in transactional/M&A insurance and the litigation risk on disputed deal warranties.
Kingstone Increases Catastrophe Reinsurance Limit to $500M
Kingstone, a regional P&C holding company distributing through retail and wholesale agents, raised its catastrophe reinsurance limit to $500 million.
Market Implication
Higher cat limit reflects a regional carrier bolstering protection against tail events amid concentrated coastal exposure.
Zurich Launches Life Sciences Insurance Solution Across Europe
Zurich launched a Life Sciences insurance solution available in Italy, Spain, France, Belgium, Denmark, the Netherlands, Sweden, Switzerland, and the UK.
Market Implication
Expansion into specialized life sciences coverage adds product-liability and clinical-trial exposure to Zurich's European specialty book.
INSTANDA Unveils AI-Focused Brand Identity
Insurance software provider INSTANDA rebranded around AI, reflecting a strategy in place since the company's founding.
Market Implication
Continued insurtech pivot to AI-centered platforms increases reliance on automated policy administration, relevant to carrier technology-dependency risk.
Regulatory & Legal
Trade policy shifts and employment/fraud enforcement drive incremental exposure changes across lines.
US Declines to Extend USMCA Trade Deal
The Trump administration on July 1 declined to extend the U.S.-Mexico-Canada Agreement, starting a decade-long wind-down clock as it seeks changes to restore manufacturing jobs and reduce trade deficits.
Market Implication
Trade-agreement uncertainty affects cross-border supply-chain and trade-credit exposures and North American manufacturing account stability.
Ex-Michigan Police Lieutenant Pleads to Falsifying Salvage Inspections
Former Lincoln Township Detective Lieutenant Johnathan Chase, 54, pled no contest to misconduct in office and one count related to falsifying salvage vehicle inspections, per Michigan AG Dana Nessel.
Market Implication
Salvage-title fraud undermines vehicle valuation integrity, relevant to auto physical damage and title-washing loss controls.
EEOC Sues Oklahoma Homebuilder for Pregnancy Discrimination
The EEOC sued H.C. Employees LLC (Home Creations), operating in Oklahoma and Texas, alleging it fired an employee because of her pregnancy in violation of federal law.
Market Implication
Employment-practices litigation reinforces EPLI claim frequency in construction/homebuilding, a segment worth EPL rating scrutiny.