Vulnerabilities
Blog
Security Alert: Critical PHP Vulnerabilities Put Most of the Web at Risk
Coalition is actively urging all businesses using PHP to patch two critical vulnerabilities in software widely used across the internet.
Blog
Combatting the ‘Vulnpocalypse’ With Zero-Day Alerts
Explore our latest Zero-Day Alerts and discover why the “vulnpocalypse” is manageable when security teams focus on the threats most likely to be exploited.
Blog
AI SOC Hype is Overdue for a Reality Check
There’s a massive difference between a tool that uses AI as a marketing veneer and a production-grade AI SOC built on real security engineering.
Blog
Risky Tech Ranking: Q2 2026 Updates
See how Coalition’s Risky Tech Ranking evolved in Q2 2026 with updates on the number of vendors scored, contributing vulnerabilities, Vendor Scores, and more.
Blog
Security Alert: WP2Shell Vulnerabilities Exploited in the Wild
Coalition notified policyholders of critical “WP2Shell’ remote code execution vulnerabilities affecting Wordpress Core.
Blog
Why MDR is Failing: Is Your Detection Tool a High-Priced Alarm?
Defenders are being confronted with an unprecedented speed crisis. Traditional human-led managed detection and response timelines no longer work.
Blog
5 Ways Wirespeed Can Transform the MSP Business Model
Wirespeed Automated Detection & Response can help managed service providers improve margins, scale more efficiently, and strengthen their security offering.
Blog
Risky Tech Ranking: Q1 2026 Updates
See how Coalition’s Risky Tech Ranking evolved in Q1 2026 with updates on the number of vendors scored, contributing vulnerabilities, Vendor Scores, and more.
Blog
Security Alert: Critical Authentication Bypass Vulnerability in cPanel
Coalition notified policyholders about a critical vulnerability in cPanel and WebHost Manager that allows remote attackers to bypass authentication.
Blog
Security Alert: Vercel Breach Results in Compromised Customer Credentials
Coalition notified policyholders of a breach that allowed unauthorized access to certain internal systems of Vercel, a cloud development platform.
Blog
‘Bleed’ Trilogy Complete With Newest Memory Leak in Citrix NetScaler
For the third time in as many years, businesses are being urged to patch a “bleed”-style vulnerability in Citrix NetScaler.
Blog
Boundary Devices and Plugins Prompt Timely Remediation
Explore Coalition’s Zero-Day Alerts by the numbers to learn which technologies drive high-risk vulnerabilities, how we operate as an early-warning system, and when we decide to alert.
Blog
Security Alert: Critical Data Exposure in Salesforce Experience Cloud
Coalition has notified policyholders about a widespread campaign targeting misconfigured guest user permissions in Salesforce Experience Cloud sites.
Blog
Risky Tech Ranking: Q4 2025 Updates
See how Coalition’s Risky Tech Ranking evolved in Q4 2025 with updates on the number of vendors scored, contributing vulnerabilities, Vendor Scores, and more.
Blog
The Patchwork Dilemma: Why the Cycle of Reactive Security Must End
Break the cycle of vendor-introduced risk by demanding better tech accountability and transitioning to modern architectures built for cyber resilience.