
The Former President of NABIP Was Minutes Away From Losing $25,000
Former NABIP president David Saltzman narrowly avoided a $25,000 loss after a sophisticated vishing scam. A fake Apple pop‑up prompted him to call an 800 number where a calm voice, posing as an FTC agent, instructed him to create a VPN account and transfer funds. The attacker leveraged social engineering to bypass technical defenses, but the call was halted before the money moved. The episode underscores how phone‑based fraud can trap even seasoned industry veterans.

May 2026: Insurance Carrier Cybersecurity Requirements Get Serious
Insurance carriers are moving from advisory guidance to enforceable cybersecurity conditions effective May 2026. The new mandate centers on email security, requiring threat protection, encryption, and domain authentication, plus a written security program (WISP) that agencies must produce on request....

Your Accountant Handles Your Books. Let CyberFin Handle Your Cybersecurity
CyberFin urges insurance agencies to treat cybersecurity like accounting or HR by delegating it to specialists. The firm provides a managed security service that monitors firewalls, endpoints and a security operations center, and offers a free cyber assessment to pinpoint...

You Already Assess Risk for a Living. Do It for Your Own Agency
Insurance agencies are facing new cybersecurity mandates from carriers and regulators, who now require multi‑factor authentication, email threat protection, endpoint security, and a written security plan. The blog argues that agencies already perform risk assessments for clients and can apply...
