Cyber insurers Resilience, At-Bay, Cowbell Cyber and Root Evidence are all saying now they've had zero pay outs for Generative AI cyber incidents.
All are saying payouts have been from incidents caused by foundational issues.
Verizons DBIR and their follow-up insurance report, the Breach Impact Study, also say the same.
It's also the same if you look at good DFIR vendors yearly reports.
Are you doing cybersecurity, or are you chasing budget by crying wolf?