Inside the Spider: Outpacing Scattered Spider with Adversarial Pressure 2026

In early 2025, the Scattered Spider threat group demonstrated just how effective modern identity-led adversaries have become. Fast-moving, patient and operationally mature, they exploited gaps between people, technology and process long before most organisations realised they were being targeted.

This private LMA briefing, held under Chatham House rules, examines how Lloyd’s and CovertSwarm worked together to outpace that threat through rapid decision-making and immediate adversarial pressure.

Operators from CovertSwarm and William Rigby from Lloyd’s will walk attendees through the scenario as it unfolded:

• How the threat was interpreted.
• How attack hypotheses were formed.
• How adversarial testing was rapidly deployed to validate risk under real-world conditions
• How this informed decisive action across people, technology and process.

All without waiting for a test cycle that would have inevitably come too late.

This session is not a retrospective incident review or a vendor case study. It is a practical discussion about how rapid, adversary-led testing can be used as an essential tool when the threat is already moving.

• 16.00: Networking
• 16.45: Presentation
• 17.45: Q&A
• 18.00: Reception
• 19.00: Close

Attendees will leave with

• clear lessons on when speed matters more than coverage
• insight into how adversarial pressure reshapes risk conversations at senior levels
• a stronger understanding of how the insurance market can respond when the next threat actor forces the issue.

Attendance is strictly limited to ensure a candid, peer-level discussion.

Due to restricted numbers, if you register and subsequently are unable to attend, please email chloe.rees@lmalloyds.com.

Speakers

William Rigby, Head of Cyber Threat Intelligence, Lloyd’s

Audience

This briefing is open to full LMA members of the LMA CISO Forum only. Invited guests may attend by referral.