Cyber Insurance Rates Are Dropping, but Exclusions Widen

Cyber insurance coverage is slowly changing, and some policies may not provide coverage for social engineering attacks like ClickFix.

Commercial risk teams are responding with tighter controls, scenario modeling, and broader collaboration across underwriting, claims, and cyber operations.

Leaders continue to prioritize resilience planning while balancing cost, coverage terms, and operational exposure in a changing market cycle.