Growing threats prompt rethink over cyber insurance