Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

On July 14, 2026, attackers compromised release processes connected to the AsyncAPI open- source project and published malicious versions of four widely used npm packages with a combined reach of approximately 2.9 million weekly downloads.

‍ ‍Cyber insurance has become a standard line item in enterprise risk management, and for good reason. The financial consequences of a significant cyber event, whether a ransomware attack that halts operations for weeks or a data breach that triggers regulatory scrutiny and third-party liability, can far exceed what any operational budget was sized to absorb. Insurance exists to handle that tail. Most organizations recognize this benefit and carry a policy.

AI agents introduce a category of security risk that traditional application security, identity management, and even standard AI security programs were not designed to handle. Unlike a generative model that only produces text, an agent takes autonomous action against real systems, chains API calls together to accomplish goals, and often holds permissions broad enough to touch data across multiple business systems.