Insurers’ vulnerability to cyber risks