03/20/2026
This week, bots targeted a web intake form at a business in our network. They submitted fraudulent applications with falsified leases, IDs, and paystubs. Payments went out on 14 of them. $15,000 was gone before anyone realized what had happened.
The policy covered it because the right questions were asked at placement. Computer fraud and social engineering endorsement, appropriate sublimit, coverage that matched the actual exposure. That outcome was decided at the last renewal conversation, not after the loss.
Zero Day Clock, a research project tracking the collapse of traditional vulnerability windows, shows the median time from vulnerability disclosure to first exploit has gone from 771 days in 2018 to effectively zero today. These attacks are not slowing down. They are getting cheaper, faster, and more accessible to anyone who wants to run them.
The question worth asking before your next commercial renewal is whether your clients' policies are built for the environment that actually exists right now. The full article is linked below.
