Connect with us

E-Business

Allianz: Volatile Markets, US Lawsuits, ESG Issues and SPACs Create New Risks for Managers

Published

on

Kindly share this post

Board members and company executives can be held liable for an increasing range of scenarios.

   Allianz: Volatile Markets, US Lawsuits, ESG Issues and SPACs Create New Risks for Managers

Today’s market volatility, with the increased threat of asset bubbles and inflation, the prospect of a growing number of insolvencies due to the pandemic environment, together with rising scrutiny around the environmental, social and governance (ESG) performance of companies and the urgency for robust cyber resilience are key risks for Directors and Officers (D&Os) to watch in 2022.

Risk managers and their D&O insurers should also closely monitor potential exposures to US derivative actions and other forms of litigation, while also not underestimating the challenges around increasingly popular SPACs (special purpose acquisition companies), according to the latest edition of Allianz Global Corporate & Specialty (AGCS)’ annual D&O report.

“The actions and culture of organizations and their directors and officers are coming under heightened scrutiny from a wide range of stakeholders, with litigation risk a primary concern,” said Shanil Williams, global head of Financial Lines at AGCS.

“This comes against the backdrop of a stabilizing D&O marketplace, although capacity is still tight in some segments and many companies would like to buy more limits than the industry can offer. The market remediation has advanced, including our own portfolio at AGCS, and this will gradually ease the pressure that some of our clients are facing. We are adopting a cautious and disciplined underwriting approach and need to remain wary about the current volatile business environment and closely monitor loss trend patterns. However, the D&O insurance space is slowly, but surely, offering opportunities for profitable growth again in selected pockets – and we are eager to pursue these.”

Uncertain insolvency issues continue to be key topic in the D&O space

The withdrawal of support measures for companies established during the pandemic sets the stage for a gradual normalization of business insolvencies in 2022.

The Euler Hermes Global Insolvency Index is likely to post a +15% y/y rebound in 2022, after two consecutive years of decline (-6% forecast in 2021 and -12% in 2020).

While the wave of insolvencies has so far been milder than anticipated, mixed trends are expected across the world.

In less developed markets, such as Africa or Latin America, the number of insolvencies is expected to increase faster compared to more developed economies, such as France, Germany and the US, where the impact of the governmental support is expected to last for longer.

Traditionally, insolvency is a major cause of D&O claims as insolvency practitioners look to recoup losses from directors.

There are many ways that stakeholders could go after directors following insolvency, such as alleging that boards failed to prepare adequately for a pandemic or for prolonged periods of reduced income.

Market volatility, climate change and digitalization key issues

The financial services industry, but also companies from other sectors, continues to face multiple risk management challenges in the current economic climate.

Markets are likely to become more volatile with the increased risk of asset bubbles and inflation rising in different parts of the world.

At the same time, more banks and insurers are expected to assign individual responsibility for overseeing financial risks arising from climate change, while investors are paying closer attention to the adequate and timely disclosure of the risk that it poses for the company or financial instrument they invest in.

The tightening regulatory environment, the prospect of climate change litigation or ‘greenwashing’ allegations could all potentially impact D&Os.

Meanwhile, digitalization has further accelerated following Covid-19, creating enhanced cyber and IT security exposures for companies.

This requires firms’ senior management to maintain an active role in steering the ICT (information and communication technologies) risk management framework.

“IT outages and service disruptions or cyber-attacks could bring significant business interruption costs and increased operating expenses from a variety of causes including customer redress, consultancy costs, loss of income and regulatory fines. Last, but not least, brand reputation can also suffer. All this can ultimately impact a company’s stock price with management being held responsible for the level of preparedness,” said Pauline Vacher, head of Financial Lines for South Africa and France.

Heightened litigation risk in the US

Litigation risk continues to be a top D&O concern, in particular around shareholder derivative actions which are increasingly being brought on behalf of foreign companies in US courts.

“A number of new lawsuit filings, the recent openness of certain courts to extending long-arm jurisdiction, and a possibly record-breaking settlement announced in October 2021, point to heightened US litigation risk for directors and officers of non-US domiciled companies,” David Ackerman, Global Claims Key Case Management at AGCS emphasizes.

Since early 2020, a group of plaintiffs’ firms has brought more than 10 derivative lawsuits in New York state courts on behalf of shareholders of non-US companies seeking to hold directors and officers legally and financially accountable for various breaches of duty to their corporations.

The financial hurdles to bring suit in the US are significantly lower than in many other countries, while US courts and juries are considered more plaintiff-friendly than many others around the world.

The consequences to directors and officers forced to defend themselves in derivative litigation before US courts can be severe.

In what may turn out to be a record-setting settlement for a US derivative lawsuit, in October of this year defendants agreed to pay a minimum of US$300mn to settle litigation brought in a New York state court by shareholders of Renren, a social media corporation based in China, and incorporated in the Cayman Islands, after allegations of corporate misconduct.

Scrutiny over SPACs

Another emerging risk in the global D&O insurance space comes from the growth of so-called Special Purpose Acquisition Companies (SPACs), also known as ‘blank check companies’.

These represent a faster track to public markets. Advantages fueling the growth of SPACs over traditional Initial Public Offerings (IPOs) include smoother procedures, less regulatory and process burdens, easier capital sourcing and shorter timelines to complete a merger with target companies. During the first half of 2021, the number of SPAC mergers in the US, both announced and completed, more than doubled the full year total of 2020 with 359 SPAC filings, garnering a combined US$95bn raised.

The growth of SPACs in Europe may not match the scale of the US boom, but there is still a growing expectation that it will increase despite a less favorable company law environment compared to the US.

In Asia the market is slowly gaining momentum with a significant uptick in companies in China, Hong Kong and Singapore as a new route to accessing capital markets.

SPACs carry a set of specific ‘insurance-relevant’ risks, and losses are already reported to be flowing through to the D&O market as both the SPAC and the private target company typically obtain D&O coverage.

“Exposures could potentially stem from mismanagement, fraud or intentional and material misrepresentation, inaccurate or inadequate financial information or violations of rules or disclosure duties,” said David Van den Berghe, global head of Financial Institutions at AGCS.

In addition, a failure to finalize the transaction within the two-year period, insider trading during the time a SPAC goes public, a wrong selection of a target to acquire or the lack of adequate due diligence in the target company could also come into play. Post-merger the risk of the go-forward company to perform as expected or failure to comply with the new duties of being a publicly-listed company also needs to be considered.


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

E-Business

Kaspersky Discovers Vulnerability in Qualcomm Snapdragon Chips that can Lead to Data Loss & Device Compromise

Published

on

Kindly share this post

Kaspersky ICS CERT discovered a hardware-level vulnerability affecting Qualcomm chipsets that are widely used in a range of consumer and industrial devices, including smartphones and tablets, car components, IoT devices and more.

The vulnerability resides in the BootROM – firmware embedded at the hardware level. Attackers could potentially get access to any data stored on the device or device sensors like camera and microphone, implement complicated attack scenarios and in some circumstances get full control of the device. The results of the research were presented at Black Hat Asia 2026.

The vulnerability affects Qualcomm MDM9x07, MDM9x45, MDM9x65, MSM8909, MSM8916, MSM8952 and SDX50 series and was reported to Qualcomm in March 2025. Qualcomm formally acknowledged the vulnerability in April 2025. It has been assigned a CVE-2026-25262. Other Qualcomm-based chips may be affected as well.

Kaspersky researchers explored the Sahara protocol, a low-level communication system used when a Qualcomm chip enters Emergency Download Mode (EDL) – a special recovery mode designed for repairing or restoring smartphones or other devices. Sahara acts as the first step that allows a computer to connect to the device and load software before the operating system on the device starts.

Kaspersky demonstrated that a security flaw in this process could allow an attacker with physical access to the target device to bypass key security protections in the chip, compromise the secure boot chain and, in some cases, deploy malicious applications and backdoors to the chip’s Application Processor, thus fully compromising the entire device.

For example, in cases when the target device is a smartphone or a tablet, the attacker can potentially get access to entered user passwords, and subsequently this opens further access to multiple types of sensitive user data, such as files, contacts, location, access to the devices’ camera and microphone, etc.

A potential attacker only needs a few minutes of physical access to a device to compromise it. Therefore, if a smartphone has been sent for repair or left unattended for a short time, one can no longer be sure it is not infected. Researchers warn that the threat extends beyond end-user scenarios to include potential compromise during the supply chain phase.

“Vulnerabilities like this may allow attackers to deploy malware that is difficult to detect and remove. In practice, this could enable covert data collection or influence device behaviour over extended periods of time.

“While a reboot might seem like an effective way to remove such malware, it cannot always be relied upon: compromised systems may simulate a reboot without actually resetting. In such cases, only a complete loss of power – including battery depletion – guarantees a clean restart,” comments Sergey Anufrienko, security expert at Kaspersky ICS CERT.

Kaspersky advises organisations and individual users to exercise strict physical security control over devices including at the supply, maintenance and decommissioning phases. A reboot of the device by cutting off the power supply to the affected chip (if available) or full battery discharge may help to get rid of the malware if it was installed.


Kindly share this post
Continue Reading

E-Business

Survey Shows Gaps in Cybersecurity Policies and Employee Commitment Leave Organisations Vulnerable

Published

on

Kindly share this post

A recent Kaspersky survey entitled “Cybersecurity in the workplace: Employee knowledge and behaviour”, showed that 39% of professionals in the Middle East, Turkiye and Africa (META) region, consider cybersecurity rules in their company to be excessive or not fully appropriate.

While 7% noted that their organisations do not have cybersecurity rules or that they are not aware of them. These results show a disconnect between corporate cybersecurity policies and employee commitment to these rules, underscoring the risks associated with shadow IT and unmanaged device usage in the workplace.

Shadow IT is defined as the use of unauthorised software, devices, or services without IT oversight, and it has evolved into a critical business risk. While often driven by employee productivity needs, it creates blind spots for IT departments.

The rise of hybrid work environments, increased reliance on cloud-based tools and the spread of AI tools have accelerated this trend. Without robust cybersecurity management and oversight, organisations face heightened exposure to ransomware attacks, data leaks, and regulatory penalties.

19% of survey respondents in the META region said there are no policies regarding the use of non-corporate devices in their company. 35% of employees admitted that they can use their own devices to access business information, provided they have some type of cybersecurity protection, even consumer-grade software.

On the positive side, 21% said they can use their own device, but these must first pass more stringent corporate IT security checks; while 25% of respondents indicated that only devices provided by the IT function can be used for work purposes.

The situation is significantly better with permissions for employees to install software on corporate devices without IT department’s approval. 50% reported that only IT specialists in their company are allowed to install software, while in 31% of organisations only top management or designated users can do so. 11% of employees can install software that is approved by the IT team. However, 8% of respondents said that all users can install any software they need without IT agreement in their organisation.

At the same time 21% of professionals surveyed acknowledged that within the past year they installed software on their work devices without IT supervision. That highlights a persistent shadow IT challenge that continues to expose organisations to security vulnerabilities, compliance risks, and data breaches.

“Shadow IT is now a mainstream operational risk. When one in five employees installs software without IT oversight, it signals a policy gap. Many organisations already have security policies in place, but employee perception must also be considered.

Organisations should move beyond restrictive controls and instead implement intelligent, user-centric cybersecurity strategies that combine strategies that integrate technology with employee awareness and responsible use,” said Toufic Derbass, Managing Director for the META region at Kaspersky.

 


Kindly share this post
Continue Reading

E-Business

Microsoft Faces £1.7Bn Cloud Lawsuit in UK over Alleged Market Abuse

Published

on

Kindly share this post

Microsoft is facing a £1.7 billion ($2.3 billion) class action lawsuit in the United Kingdom over allegations that it abused its dominant market position in cloud computing.

Microsoft Faces £1.7bn Cloud Lawsuit in UK Over Alleged Market Abuse

Microsoft

The case, filed before the Competition Appeal Tribunal, was brought by Maria Luisa Stasi on behalf of about 59,000 British businesses and organisations. It alleges that Microsoft unfairly imposed higher costs on customers running its Windows Server software on rival cloud platforms.

Stasi said the company’s practices have had a significant financial impact on both public and private sector organisations over several years.

In allowing the case to proceed, the tribunal ruled that it has a “reasonable prospect of success.” The judges noted that Microsoft is alleged to have abused its dominance in the paid server operating system market to undermine competition in the cloud services space.

If the claim succeeds, compensation for affected organisations is estimated to range between £1.7 billion and £2.1 billion.

Microsoft has rejected the allegations and confirmed it will appeal the ruling. A company spokesperson said the decision does not represent a final judgment on the claims and that it disputes the substance of the case.

The lawsuit comes as regulators in the UK and the European Union intensify scrutiny of Microsoft’s cloud business practices. UK authorities are currently assessing whether the company should be designated as having “strategic market status,” a move that would subject it to stricter competition rules.


Kindly share this post
Continue Reading

Trending