All our lotl news
AI Agents
Living-Off-the-Land 2.0: How Autonomous AI Agents Are Weaponizing LOTL Tradecraft — And What It Means for Cyber Underwriting
The convergence of agentic AI and living-off-the-land attack techniques is collapsing three attacker constraints at once: cost, skill, and detectability. A deep analysis of demonstrated capabilities, real incidents, and the underwriting implications that should reshape your risk selection in 2026.
Michael Guiao
9 min read
Detection Gap · · 8 min read
The LOTL 2.0 Detection Gap: Why Your Current Security Stack May Be Blind to the Next Generation of Attacks
Detailed analysis of the specific detection blind spots that autonomous LOTL attacks exploit — and the behavioral analytics, identity monitoring, and architectural changes that close them. Includes a control effectiveness matrix for underwriters and risk engineers.
Incident Tracker · · 8 min read
LOTL 2.0 Incident Tracker: Documented Cases of AI-Augmented Living-Off-the-Land Attacks (2025–2026)
Living document tracking confirmed and suspected cases of autonomous or AI-augmented LOTL attacks in the wild. Updated as new evidence emerges. Includes attack chain analysis, tradecraft observations, and underwriting takeaways for each incident.
Mid Market · · 7 min read
The Mid-Market Crosshairs: How LOTL 2.0 Eliminates the "Too Small to Target" Protection
Analysis of why mid-market organizations (€50M–€500M revenue) are the primary beneficiaries of the LOTL 2.0 shift, how attacker economics have fundamentally changed, and what this means for cyber insurance portfolio risk. Includes scenario modeling for underwriters.
Underwriting · · 8 min read
The LOTL 2.0 Underwriting Playbook: Risk Selection Criteria When the Attacker Is an Algorithm
Practical underwriting framework for assessing cyber risk in the era of autonomous LOTL attacks. Includes revised risk scoring matrices, control weight adjustments, and application question updates for underwriters.
blog.featured
The Death of the Questionnaire: Why Underwriters Now Demand EDR Telemetry Before Binding
Underwriting ·
10 min read
WordPress Plugin Flaw CVE-2023-4213 Exposes 10K+ Sites to Cyber Claims
Cyber Risk ·
6 min read
WordPress Plugin XSS Vulnerability Exposes Cyber Insurance Portfolios to Persistent Web Risks
Cyber Risk ·
5 min read
WordPress Security Plugin Flaw Exposes Organizations to Cyber Claims
Cyber Risk ·
6 min read
Premium Report
2026 Cyber Risk Landscape Report
24 pages of threat analysis, claims data, and underwriting implications for European cyber insurance.
View Reports →