Security
Blog
Cyber Criminals Left Their AI Hacking Tools Open to the Internet
Coalition security researchers found thousands of AI hacking harnesses on the open internet. The discovery carries implications for the future of cyber risk.
Blog
What You Need to Know Know About the European Fridge Hacks
Europe is experiencing another round of cyber attacks on fridges. How far does the threat travel, who is at risk, and how does insurance respond?
Blog
Why PHP2Shell Claims Will Lag Exploits by Weeks
Cyber insurance claims from PHP2Shell haven’t arrived en masse yet. Did we overhype the PHP vulnerabilities or is this the calm before the storm?
Blog
Security Alert: Critical PHP Vulnerabilities Put Most of the Web at Risk
Coalition is actively urging all businesses using PHP to patch two critical vulnerabilities in software widely used across the internet.
Blog
Designing Security for the People Who Have to Live With It
Anyone who tells you security doesn't introduce friction is lying. Protection comes at a cost, and it’s usually paid in someone else's time and attention.
Blog
ConnectWise Investigating Unauthorized Access to Cloud Backup App
Coalition and Wirespeed have notified businesses that may be exposed to attempts of unauthorized access in ConnectWise Cloud Backup for Microsoft 365.
Blog
Combatting the ‘Vulnpocalypse’ With Zero-Day Alerts
Explore our latest Zero-Day Alerts and discover why the “vulnpocalypse” is manageable when security teams focus on the threats most likely to be exploited.
Blog
Two Citrix RCE Zero Days Exploited in the Wild
Coalition notified policyholders of two potential Citrix zero-day vulnerabilities before vendor confirmation.
Blog
Risky Tech Ranking: Q2 2026 Updates
See how Coalition’s Risky Tech Ranking evolved in Q2 2026 with updates on the number of vendors scored, contributing vulnerabilities, Vendor Scores, and more.
Blog
How Login Security Helps Businesses Combat Identity-Based Threats
Business email compromise is the leading driver of cyber claims. Login Security monitors suspicious login activity and kicks out attackers.
Blog
Security Alert: WP2Shell Vulnerabilities Exploited in the Wild
Coalition notified policyholders of critical “WP2Shell’ remote code execution vulnerabilities affecting Wordpress Core.
Blog
What’s Old Is New Again: Attackers Target Resurgent Vulnerabilities
Take a look under the hood of Coalition’s Zero-Day Alerts to learn which vendors appear the most, how we balance new risks with the old, and more.
Blog
Risky Tech Ranking: Q1 2026 Updates
See how Coalition’s Risky Tech Ranking evolved in Q1 2026 with updates on the number of vendors scored, contributing vulnerabilities, Vendor Scores, and more.
Blog
Security Alert: Critical Authentication Bypass Vulnerability in cPanel
Coalition notified policyholders about a critical vulnerability in cPanel and WebHost Manager that allows remote attackers to bypass authentication.
Blog
Security Alert: Vercel Breach Results in Compromised Customer Credentials
Coalition notified policyholders of a breach that allowed unauthorized access to certain internal systems of Vercel, a cloud development platform.