Protecting Against Cyber Threats: A Q&A with Cyber Experts
PURE Staff
June 17, 2025
Cyber risks are at an all-time high, with sophisticated threats putting high net worth individuals at an even higher risk of being targeted.
PURE President, Dave Logan, sat down with cyber experts Chris Pierson, CEO of BlackCloak®, a luxury cybersecurity platform specializing in digital executive protection and Neil Rekhi, Product Manager at HSB®, a reinsurance partner to PURE with deep expertise in cyber risk, to discuss practical, proactive steps you can take to stay ahead of today’s evolving cyber threats.
Top advice from cyber experts
- Enable multi-factor authentication on your email, financial, healthcare and social media accounts. It adds an extra layer of protection and helps prevent unauthorized access. Learn more about multi-factor authentication >
- Freeze your credit with all three major bureaus—Equifax, Experian and TransUnion—to block anyone from opening accounts in your name.
- Protect your devices with anti-malware software that monitors for viruses and other threats. Early detection can make all the difference.
- Keep your devices up to date. Running the latest software helps close security gaps and reduce the risk of breaches.
The Q&A
Q: We hear about cyber attacks all the time. What are the most common scams?
A (Chris Pierson): Phishing continues to be one of the most widespread threats. These scams typically involve emails or texts that appear to come from a trusted source—your bank, a government agency, a well-known brand or even a colleague. The goal is to get you to click a link, open an attachment or share personal information.
Social engineering scams are also on the rise. These include romance scams or messages that create a false sense of urgency—like a request for immediate payment or a warning about a locked account. They’re designed to trigger quick emotional responses and override good judgment.
Many of these attacks are also used to deliver malware—malicious software that can be installed through a seemingly harmless link or attachment. A healthy dose of skepticism can go a long way—if something feels off, it probably is.
Q: What are some of the cybercrime trends we’re seeing right now?
A (Neil Rekhi): One of the biggest shifts we’re seeing is how cybercriminals are using artificial intelligence to increase the speed, scale and realism of their attacks. Deep fakes and audio clones are being used to impersonate real people, including business contacts and family members, making it even harder to know what’s real.
AI is also making it easier to gather and exploit open-source intelligence—publicly available information like social media posts, online bios or professional profiles. Cybercriminals can now build detailed profiles of potential victims, allowing them to craft highly personalized attacks that are harder to detect and easier to fall for.
-
📢Listen as Chris and Neil break down how AI is changing the cyber threat landscape.
Q: Many people believe, “That could never happen to me.” Can you share an example that shows how easily someone can fall victim to a cyber scam?
A (Neil Rekhi): One of the biggest misconceptions about cybercrime is that it only happens to people who are careless. In reality, many scams are carefully timed and skillfully executed to appear completely legitimate. Even thoughtful, highly successful individuals can be targeted—and fooled.
Case in Point: An Example from Neil
One homeowner was in the middle of a major home renovation. They had been working with a trusted contractor, exchanging emails and wiring payments each month based on invoices.
Then came a familiar-looking email from what appeared to be the contractor, notifying the member that their banking details had changed. The timing made sense. The message sounded consistent and routine. The email address looked almost identical to the real one. So, the member followed the instructions and wired more than $150,000.
It wasn’t until the real contractor followed up about a missed payment that the fraud was discovered. A cybercriminal had spoofed the contractor’s email and intercepted the exchange at just the right moment.
Unfortunately, the funds were unrecoverable, but because the insured had a personal cyber policy, they were reimbursed their policy limit.
This type of scam isn’t rare. It’s increasingly common—and it highlights how important it is to remain cautious, even in everyday interactions that feel completely normal.
Even high-profile individuals can fall victim to cyber scams
Mark Cuban was targeted by a caller posing as a Google representative1. The convincing caller claimed his account had been compromised and instructed him to click a recovery link sent via email. Mark followed the instructions, inadvertently giving the hacker access to his Gmail. If someone as savvy as Mark Cuban can be tricked, it’s clear that anyone can be vulnerable.
1. https://www.entrepreneur.com/business-news/mark-cuban-issues-warning-after-his-google-account-is-hacked/476046
-
📢 Hear real-life examples of cyber attacks on high-profile individuals.
Q: What are some practical steps everyone should take to protect themselves from cyber threats?
A (Chris Pierson): There are a few foundational steps everyone should take:
- Enable multi-factor authentication (MFA): This adds an extra layer of protection to your email, financial, social media and healthcare accounts. Even if a criminal steals your login credentials, they’d still need access to your second device to get in.
- Place a credit freeze or fraud alert: These tools limit a criminal’s ability to open new accounts in your name.
- Use anti-malware software: Install it across all your devices to detect and block malicious software.
- Be cautious with personal information: Only share sensitive details when it’s absolutely necessary—and only with trusted sources.
-
📢 Listen to the full conversation for expert tips on reducing your cyber risk.
Q: What does personal cyber insurance typically cover that your bank or financial institution might not?
A (Neil Rekhi): Most financial institutions only cover fraud tied directly to your bank accounts—and only when they’re legally obligated to. But today’s threats go far beyond that.
We’re seeing more losses tied to social engineering scams, extortion, device compromise, cyberbullying and even third-party liability—none of which are typically covered by your bank.
That’s where personal cyber insurance comes in. It’s designed to address the full spectrum of modern digital risks. It’s not just about identity theft anymore—it’s about protecting you and your family from the broader, fast-evolving landscape of cyber threats.
While it is our hope that this advice will help reduce your risk to cyber threats, PURE cannot guarantee that following it will prevent a cyber incident.
Glossary
- Audio Cloning
- The use of AI to replicate a person's voice
Cybercriminals can do this by analyzing recordings and generating new speech that mimics their tone, pitch and speech patterns.
- Deep Fakes
- AI-generated images, videos or audio recordings that manipulate someone's appearance or voice
These try to replace someone's likeness or voice to create a highly realistic but fake representation.
- Multi-Factor Authentication
- Also known as two-step authentication, combines something you know (e.g., login credentials) with something you have (e.g., a code sent to a device)
Some people may go one step further and add something you “are” (e.g., a fingerprint) to further enhance account security and make it significantly harder for hackers to gain access.
- Phishing
- A type of social engineering where the hackers impersonate trustworthy entities to trick people into providing personal information
Personal information can include passwords or credit card numbers.
- Social Engineering
- A tactic where attackers trick people into divulging sensitive information
These attackers often exploit trust, urgency or emotional appeals.
- Spraying Method
- A type of cyberattack where hackers attempt to gain access to multiple accounts
These attackers will generally send a phishing email or trying a few commonly used passwords.
- Targeted Attacks
- A type of cyberattack that is directed at a specific person
These attackers usually have the goal of stealing sensitive information.