Cyber Threats
Blog
Security Alert: Critical PHP Vulnerabilities Put Most of the Web at Risk
Coalition is actively urging all businesses using PHP to patch two critical vulnerabilities in software widely used across the internet.
Blog
Designing Security for the People Who Have to Live With It
Anyone who tells you security doesn't introduce friction is lying. Protection comes at a cost, and it’s usually paid in someone else's time and attention.
Blog
ConnectWise Investigating Unauthorized Access to Cloud Backup App
Coalition and Wirespeed have notified businesses that may be exposed to attempts of unauthorized access in ConnectWise Cloud Backup for Microsoft 365.
Blog
Combatting the ‘Vulnpocalypse’ With Zero-Day Alerts
Explore our latest Zero-Day Alerts and discover why the “vulnpocalypse” is manageable when security teams focus on the threats most likely to be exploited.
Blog
Two Citrix RCE Zero Days Exploited in the Wild
Coalition notified policyholders of two potential Citrix zero-day vulnerabilities before vendor confirmation.
Blog
Outcomes Over Alert Queues: Rebuilding MDR Around Speed
Coalition was recognized in “The Managed Detection And Response Services Landscape, Q3 2026” report by Forrester Research Inc.
Blog
Inbox In-Fighting: A Window Into BEC Subculture
Coalition Incident Response has observed threat actors using the names of inbox rules to communicate. What did we learn from hidden chats?
Blog
AI SOC Hype is Overdue for a Reality Check
There’s a massive difference between a tool that uses AI as a marketing veneer and a production-grade AI SOC built on real security engineering.
Blog
MSPs Report Losing Clients Over Slow Threat Containment
New study reveals 53% of MSPs lost a client in the past 24 months because they were unable to contain an incident fast enough.
Blog
Risky Tech Ranking: Q2 2026 Updates
See how Coalition’s Risky Tech Ranking evolved in Q2 2026 with updates on the number of vendors scored, contributing vulnerabilities, Vendor Scores, and more.
Blog
A New Era Of Social Engineering: The Device Code Phishing Boom
Learn how threat actors abuse Microsoft’s OAuth feature to exploit security blindspots and bypass MFA — plus how Wirespeed can respond before attacks escalate.
Blog
Understanding Why Privacy Claims Doubled in H1 2026
The frequency of privacy claims doubled in the first half of 2026. How do evolving legal theories and litigation trends shape how brokers advise their clients?
Blog
The Fatal Flaw of AI-First Security Agents
Discover how agentic security investigations can fall short when responding to AI-driven attacks.
Blog
Security Alert: WP2Shell Vulnerabilities Exploited in the Wild
Coalition notified policyholders of critical “WP2Shell’ remote code execution vulnerabilities affecting Wordpress Core.
Blog
How We Reduce Alert Noise for MSPs by 99.99%
With traditional MDR, your team is still overwhelmed by false positives. Automated detection and response bridges the gap left by human-led protection.