Insurers reluctant to cover cyber-risks