Insurer Aviva and cyber risk analysis specialist CyberCube have collaborated to utilise AI to map the behaviour of cyber threat actors and the technologies they most frequently target.

The insurer says that by leveraging AI to glean threat intelligence from extensive digital forensics data and data leaks tied to leading ransomware groups, it has gained deep insights into how these threat actors operate and the tactics they use to execute attacks. It can subsequently identify companies in its commercial portfolio that are most vulnerable to specific cyber threat actors.

Using CyberCube’s Portfolio Threat Actor Intelligence service and its suite of cyber analytics software, the move aims to strengthen Aviva’s cyber exposure management strategy. James Mitchell, senior cyber pricing and exposure manager, Aviva, said: “As cyber attacks continue to rise, including the targeting of high-profile organisations, it’s crucial that businesses are properly protected.

“Over the past year, Aviva has rigorously tested Portfolio Threat Actor Intelligence against several ransomware groups. These threat actors were selected based on their relevance to Aviva’s commercial portfolio – specifically their targeting preferences – and our ability to confidently map tactics, techniques, and procedures across the cyber kill chain.

“By incorporating this unique blend of cyber analytics and threat intelligence into current underwriting and exposure management processes, re/insurers can gain deeper insights into their portfolios, enabling them to better manage cyber risk for both themselves and their customers.

“Customers identified as higher risk can then receive more tailored advice from re/insurers. For instance, assisting customers with the selection of appropriate cybersecurity tabletop exercises that are specifically linked to the tactics of the higher-risk threat actors.”

William Altman, head of cyber threat intelligence services at CyberCube, added: “Portfolio Threat Actor Intelligence is an innovative solution that takes the management of cyber insurance portfolio risk to the next level. Through this capability, CyberCube supports Aviva’s exposure management team in identifying companies within its portfolio that display firmographic traits, technology dependencies, and security gaps likely to attract specific cyber threat actors.”

---