When a cyber risk insurance quote lands on your desk and the premium is sky high, it’s natural to assume that the insurer is judging your environment to be high risk. According to one of the many cyber insurance presentations at Black Hat USA 2025, the reason may not be so obvious: it may be that the insurer is limiting its risk exposure to a product or service you use, rather than finding a risk within your environment. Yet my risk is the same to all insurers, and it’s likely that some insurers are capping their risk exposure to certain car manufacturers by pricing themselves out of the market. As the cyber insurance and cybersecurity industries become further entwined, the data-based insights from insurers’ claims can – and should – improve cybersecurity posture for everyone involved, not just the insured. A statistic shared during a presentation revealed that in the first six months of 2025, 45% of new cyber claims were a result of an SSL VPN lacking MFA.