UnHacked the podcast with hosts Justin Shelley, Bryan Lachapelle, and Mario Zaki.
Insurance companies are quietly rewriting cyber policies to exclude AI-related claims. If your team is using AI tools without a governance policy, you may already be uncovered.
Justin Shelley and Mario Zaki unpack what's actually changing in cyber insurance right now and why it matters for every small to mid-sized business. After 12 episodes on cybersecurity basics and 12 more on AI, this episode pulls it all together into one urgent conversation: the fundamentals still apply, but AI has introduced new ways to lose data, trigger lawsuits, and void your coverage.
Justin admits his first vibe coding project had zero security and almost leaked sensitive data. Mario breaks down why businesses are becoming their own worst threat by skipping basics like backups and access controls. The numbers are stark. AI-enabled malicious breaches jumped 56% year over year. The average AI-enabled breach costs $6 million. 70% of breached organizations had no AI governance policy. 92% of AI-related breaches involved systems lacking basic access controls. Insurance carriers are now excluding claims tied to AI resume screening discrimination, negligent vibe coding, and data loss from self-built AI systems.
What you'll learn
- The specific questions to ask your insurance agent before your next renewal to confirm AI coverage
- Why AI resume screening can trigger discrimination exclusions in business liability policies
- How shadow AI use, unapproved tools employees bring in, doubled as a breach vector in one year
- Why backups remain the number one survival tool when a vibe coded system deletes or corrupts your data
- Where to get a free AI policy template and checklist to start governance this week
