Cyber Incident? Get Help
Featured resources
Cyber Knowledge Center
Build your cyber expertise, access exclusive insights, read real customer stories, and more.
![Knowledge Center Tile > [Video, Webinar]](/_next/image?url=https%3A%2F%2Fimages.ctfassets.net%2Fo2pgk9gufvga%2F7wA8Z1UETMksmRx3hfuccm%2F9d15fa919c0e8cd5f830ef33fd6a6c9c%2FGuide.png&w=3840&q=75)
![Knowledge Center Tile > [Report, Blog, Page, (Security Labs Only)]](/_next/image?url=https%3A%2F%2Fimages.ctfassets.net%2Fo2pgk9gufvga%2F5ALZvaBUnatkj9himp2LDo%2F51e3f43e985bfe2ea6ee72beecb4ac11%2FKnowledge_Center_Tile.png&w=3840&q=75)
Products & Services
Products & Services
Coalition Incident Response
Webinar
Coalition Security Advantage
Coalition Security Advantage
Blog
How Threat Actors Are Outsmarting Your Email Defenses
Coalition Incident Response has seen an uptick in phishing attacks via Microsoft 365’s Direct Send feature. How does that work?
Blog
How Hackers Leverage Insurance Details in Ransomware Attacks
Businesses should secure their cyber insurance policies like any other highly sensitive document to prevent it from becoming a negotiation playbook.
Blog
Defense in Depth: Building a Multi-Layered Security Strategy
Determining which security controls will make the biggest impact can be challenging. Explore the 5 focus areas for building a defense-in-depth strategy.
Blog
Living Off the Land: How Hackers Exploit Victims’ Own Tools to Execute Attacks
Threat actors are using your operating system’s built-in tools to execute attacks and remain undetected. How can your business fight back?
Blog
Infostealers Are Silently Siphoning Businesses’ Sensitive Data
Attackers are increasingly using infostealers to loot private data en masse. Businesses can mitigate these risks with support from Coalition Security.
Blog
Threat Actors Are Impersonating IT Teams to Deploy Ransomware
Coalition Incident Response has noted a trend where cybercriminals impersonate the help desk through Microsoft Teams to gain remote access and execute ransomware.
Case Study
Municipality exercises caution after EDR alerts on suspicious network activity
Municipality exercises caution after EDR alerts on suspicious network activity
Case Study
Nonprofit reports cryptojacking event after noticing higher utility bills
Nonprofit reports cryptojacking event after noticing higher utility bills
Case Study
Labor union recovers $5.5M from international bank account from fraudulent wire transfer
Labor union recovers $5.5M from international bank account from fraudulent wire transfer
Case Study
Threat actor poses as new client and convinces law firm to wire $89,000 in debt collection scheme
Threat actor poses as new client and convinces law firm to wire $89,000 in debt collection scheme
Case Study
Manufacturer gains decryption keys from incident responders and avoids paying sizable ransom
Manufacturer gains decryption keys from incident responders and avoids paying sizable ransom
Case Study
Law firm negotiates over 50% ransom reduction to protect client data
Law firm negotiates over 50% ransom reduction to protect client data
Case Study
Industrial manufacturer pays less than half of initial ransom demand after data backups are compromised
Industrial manufacturer pays less than half of initial ransom demand after data backups are compromised
