Cyber Threats
Blog
Cyber Criminals Left Their AI Hacking Tools Open to the Internet
Coalition security researchers found thousands of AI hacking harnesses on the open internet. The discovery carries implications for the future of cyber risk.
Blog
Why PHP2Shell Claims Will Lag Exploits by Weeks
Cyber insurance claims from PHP2Shell haven’t arrived en masse yet. Did we overhype the PHP vulnerabilities or is this the calm before the storm?
Blog
Security Alert: Critical PHP Vulnerabilities Put Most of the Web at Risk
Coalition is actively urging all businesses using PHP to patch two critical vulnerabilities in software widely used across the internet.
Blog
Designing Security for the People Who Have to Live With It
Anyone who tells you security doesn't introduce friction is lying. Protection comes at a cost, and it’s usually paid in someone else's time and attention.
Blog
ConnectWise Investigating Unauthorized Access to Cloud Backup App
Coalition and Wirespeed have notified businesses that may be exposed to attempts of unauthorized access in ConnectWise Cloud Backup for Microsoft 365.
Blog
Combatting the ‘Vulnpocalypse’ With Zero-Day Alerts
Explore our latest Zero-Day Alerts and discover why the “vulnpocalypse” is manageable when security teams focus on the threats most likely to be exploited.
Blog
The Identity Compromises You Aren't Seeing
Catching an identity compromise means treating a successful login as the start of an investigation, rather than the end of it.
Blog
Outcomes Over Alert Queues: Rebuilding MDR Around Speed
Coalition was recognized in “The Managed Detection And Response Services Landscape, Q3 2026” report by Forrester Research Inc.
Blog
Inbox In-Fighting: A Window Into BEC Subculture
Coalition Incident Response has observed threat actors using the names of inbox rules to communicate. What did we learn from hidden chats?
Blog
AI SOC Hype is Overdue for a Reality Check
There’s a massive difference between a tool that uses AI as a marketing veneer and a production-grade AI SOC built on real security engineering.
Blog
MSPs Report Losing Clients Over Slow Threat Containment
New study reveals 53% of MSPs lost a client in the past 24 months because they were unable to contain an incident fast enough.
Blog
Risky Tech Ranking: Q2 2026 Updates
See how Coalition’s Risky Tech Ranking evolved in Q2 2026 with updates on the number of vendors scored, contributing vulnerabilities, Vendor Scores, and more.
Blog
The Fatal Flaw of AI-First Security Agents
Discover how agentic security investigations can fall short when responding to AI-driven attacks.
Blog
Security Alert: WP2Shell Vulnerabilities Exploited in the Wild
Coalition notified policyholders of critical “WP2Shell’ remote code execution vulnerabilities affecting Wordpress Core.
Blog
How We Reduce Alert Noise for MSPs by 99.99%
With traditional MDR, your team is still overwhelmed by false positives. Automated detection and response bridges the gap left by human-led protection.