Silent cyber

Cyber risk neither explicitly included nor excluded in traditional policies, and how the market is clarifying it.

Microsoft 365 down for more than a day: what a non-malicious failure means for cyber underwriters

Since 12 November 2026 a server failure at Microsoft 365 has stopped Outlook, Exchange Online and other services in at least 74 countries, with no sign of an attack. The analysis: why many cyber policies do not trigger, waiting periods and quantification, aggregation on a single supplier and questions for renewals.

Insights · Nov 13, 2026

Read

AI Act: obligations, deadlines and what changes for insurance

Fact sheet updated to 1 November 2026 on Regulation (EU) 2024/1689 (AI Act), the 2026 amendments and the related Italian rules (Law 132/2025 and Legislative Decree 160/2026): who is in scope, prohibited and high-risk systems, deadlines, fines, authorities and what it means for cyber, PI and liability policies, including life and health pricing.

Regulation · Nov 02, 2026

Read

AI civil liability: who pays for the damage and which policy responds

With no dedicated EU directive, damage caused by an AI system is handled through national civil law, the new Product Liability Directive, the AI Act and, in Italy, Law 132/2025 and Legislative Decree 160/2026. A reading from the side of those who take on cyber risk: where liability falls, which policies are exposed, where the market is excluding and which questions to bring to renewals.

Regulation · Nov 01, 2026

Read

Software as a product from 9 December 2026: what changes for underwriting across PI, product liability and cyber

From 9 December 2026 software is a product under Directive (EU) 2024/2853. What falls into PI, product liability and cyber, where the three covers overlap or leave gaps, and what changes in underwriting questions.

Regulation · Oct 31, 2026

Read