Security Research Engineer - Attack Surface & Risk Signals

CyberCube has launched six new AI Event Families and an I2T2 framework to help insurers evaluate AI-driven losses. The framework examines AI risk across four dimensions: Information, Intelligence, Tactics, and Technology. The company argues AI risk extends beyond cyber insurance, affecting multiple coverage lines including Errors & Omissions, General Liability, and Directors & Officers. AI can cause harm through flawed output even when functioning as designed, without malicious actors involved. CyberCube notes insurers will face AI risk similarly to how they addressed silent cyber risk. Jon Laux, VP of Product and Analytics, said the framework provides "a structured way to think, evaluate, and quantify emerging risk." The company will host a webinar on 17 September 2026 to discuss the framework further. CyberCube, established in 2015 within Symantec, provides cyber risk analytics software to insurance institutions globally.

CyberCube creates new Framework for evaluating AI-Driven losses. ET By Editorial Team September 1, 2026 CyberCube, the leading provider of cyber risk analytics, unveils six new AI Event Families and a new I2T2 framework, providing carriers, brokers, and risk managers with a practical way to think about and evaluate AI-driven loss. The I2T2 framework addresses AI risk in a way that remains applicable to cyber insurance, while also reflecting the wider array of insurance risks now possible. The framework sets out four dimensions through which AI affects insurance risk: Information, Intelligence, Tactics, and Technology. CyberCube's framework is set out in "Machine State of Mind: A Framework for Quantifying AI-Driven Insurance Risk," examining how artificial intelligence is reshaping risk across the insurance industry. It notes that AI is no longer a niche technical risk confined to a single line of insurance. As AI systems take on greater autonomy in decision-making, content generation, and operational processes, they introduce new forms of loss that cut across established coverage lines, including, but not limited to, Errors & Omissions (E&O), Technology E&O, Cyber, General Liability, and Directors & Officers, as well as introducing novel impacts that insurance has never covered before. As this new intelligence evolves, CyberCube argues that the industry's ways of thinking about insurance risk must evolve with it. Rather than treating AI risk as just an extension of Cyber risk, the framework examines where AI and Cyber overlap, where they diverge, and what this means for how claims are likely to be triggered and allocated across policies. Key findings. * AI risk shares several characteristics with Cyber risk, including single points of failure (SPoFs), human error, data loss, and the potential to amplify existing threats. However, it also differs in important ways. For example, AI can cause harm through hallucination or flawed output even when functioning exactly as designed, without the involvement of any malicious actor. * AI is best understood as a technology and information revolution, rather than merely an evolution of Cyber risk. As the use of AI extends into many corners of the global economy, new frameworks are required for understanding how AI could affect property-casualty insurance coverages. * (Re)insurers grappling with AI risk will follow a path similar to that previously taken with non-affirmative ("silent") Cyber risk. Lessons from the last decade suggest that the exact application of coverages will vary by carrier. Given the breadth of transformation AI is creating, however, (re)insurers must reckon with AI risk as a multi-line challenge and opportunity. Jon Laux, VP of Product and Analytics, CyberCube, said: "At CyberCube, we are excited to help the insurance industry - and society at large - seize the opportunity by providing a structured way to think, evaluate, and quantify emerging risk. We hope the I2T2 framework can be the beginning of the journey and will provide a foundation on which others can build as they refine their own view of AI risk." CyberCube notes AI is already changing risk across a host of insurance lines, and this trend will only accelerate. John Anderson, Director of Product Management, CyberCube, said: "Carriers who recognize the transformation, act to mitigate the downside, and capitalize on the upside will serve a critical function for the 21st century economy, providing coverage, capital, and clarity in a rapidly changing landscape. Conversely, those who shrug off this transformation and try the 21st century equivalent of treating all transportation risk as homogeneous will be in for a rude surprise."

US market: Dochterman Insurance working with CyberCube. The latest update from the US market; Dochterman Insurance, the only U.S. brokerage that exclusively serves manufacturers, has launched a fully integrated cyber risk program that combines CyberCube's cyber risk analytics platform with IT assessment and CMMC 2.0 compliance services from Resource Computer Solutions (RCS). The program gives manufacturers a single point of contact for cyber risk identification, IT remediation, federal compliance certification, and insurance placement capabilities that until now required coordinating multiple unrelated vendors. The announcement comes as the Department of Defense enforces the Cybersecurity Maturity Model Certification (CMMC) 2.0 requirements across its supply chain. Phase 1 requirements for contractors took effect on November 10, 2025. Phase 2, beginning November 10, 2026, will require third-party certification for most contracts involving Controlled Unclassified Information. Manufacturers that fail to certify will be ineligible to bid on or retain Department of Defense work. Through the program, CyberCube's Broking Manager, Prep Module, and Cyber Connect solutions quantify a manufacturer's cyber exposure in financial terms, modeling potential losses from ransomware, operational disruption, and supply chain attacks. RCS then conducts a gap analysis against NIST 800-171 controls and manages the remediation and documentation required for CMMC certification. Dochterman bases the cyber insurance policy on both the risk data and the client's improved security posture, significantly discounting their insurance premiums. Michael Dochterman, CEO of Dochterman, said: "Manufacturers recognize the importance of achieving compliance but often lack the internal resources and expertise needed. Many who attempt to handle it themselves fail, and the process can be highly disruptive to their operations. To address this, we developed a program that provides a single team responsible for identifying risks, fixing vulnerabilities, preparing for CMMC certification, and selecting appropriate insurance - all from experts who understand the realities of a shop floor. Since manufacturing is our sole focus, this dedicated approach is what makes it effective." Nate Brink, Head of Broker Partnerships at CyberCube, added: "By adopting CyberCube's solutions, Dochterman is translating technical cyber risks into financial conversations that manufacturers can act on. Together, we're helping manufacturers make more informed decisions about resilience and insurance protection." Tim Coates, CEO, Resource Computer Solutions, stated: "At Resource Computer Solutions, we are focused on helping manufacturers turn cybersecurity and compliance into a strategic advantage. By aligning CMMC 2.0 requirements with practical, real-world implementation, we enable our clients to strengthen their security posture while maintaining operational efficiency and competitiveness."