ProxyNotShell is a new zero-day impacting Microsoft Exchange. Here's how to advise your clients and how Coalition keeps policyholders safe.

The number of CVEs has been steadily rising for years. Coalition reflects on the CVEs from 2023 that were the most (and least) impactful.

Vulnerability management is one of the biggest challenges security defenders face. It becomes especially difficult when a vulnerability impacts a critical device or service. When a backdoor was discovered in XZ Utils, an open-source compression…

Coalition’s not-so-secret master plan has always been to provide comprehensive digital risk management options for businesses — that means going beyond cyber insurance and investing data and resources in a cybersecurity platform. We already provide…

The situation regarding Ivanti continues to evolve. On Jan 31, 2024, two new CVEs, which can be leveraged for remote code execution (RCE), were added to the existing advisory. These additional CVEs present a substantial risk to businesses running…

In the face of a volatile threat landscape and reduced budgets, security teams face considerable pressure to keep their networks safe 24/7. Instead of trying to "do more with less," security leaders can scale their cyber operations without adding hea

From accessing a menu at a restaurant to paying for parking or boarding a flight — QR codes are everywhere. Unfortunately, threat actors have found ways to exploit QR codes, often embedding them in phishing emails. Coalition Incident Response (CIR),…

Cybersecurity is a global problem. Many security vendors offer solutions to thwart the latest trend in cybercrime, but all of these solutions have a shortcoming: They only protect against one facet of cyber risk. Coalition's journey as an insurance…

Coalition Security Labs, our security research and innovation center, has been monitoring the events surrounding the latest zero-day critical vulnerability in SysAid. SysAid publicly disclosed the vulnerability on November 8, 2023, which is being…

Cyber attacks continue to dominate headlines and the threat landscape is constantly evolving. As part of Coalition’s commitment to protecting businesses, we invite you to read our latest insights on trends and critical risks that impact organizations…

Cybersecurity defenders have a difficult job. Thousands of new vulnerabilities are released each month, and managing scarce security resources is already hard when you have a new critical vulnerability. It becomes even harder when scoring is delayed,…

Coalition Incident Response, Inc. (CIR), a technical forensic and remediation firm and Coalition's affiliate, has observed an increase in multi-factor authentication (MFA) spamming attacks, also known as MFA fatigue or MFA bombing, leading to cyber…

On May 24, 2023, Microsoft and Cybersecurity and Infrastructure Security Agency (CISA) warned in a coordinated effort that the Chinese state-sponsored advanced persistent threat (APT) known as Volt Typhoon was targeting United States critical…

Cyber attacks can happen to anyone, and small businesses are becoming bigger targets. According to our 2022 claims data, for small businesses the average cost of a cyber incident was $139,000. In partnership with our in-house security experts, we've…

CybersecurityLogical SecuritySecurity & Business ResilienceSecurity Education & Training Almost everyone has been impacted by a data breach. Data breach effects can scale from requiring employees to change their credentials to larger scale…

At Coalition, we have a unique view of cyber risks and claims experienced by our policyholders. On any given day, Coalition performs billions of security scans, sends hundreds of critical security alerts, investigates reported cyber incidents, and…

Skip to main content In cybersecurity, the human condition is the most frequent — and easiest — target. For threat actors, exploiting their human targets is usually the lowest hanging fruit instead of developing and deploying an exploit. As a result,…

The cyber attack landscape evolved significantly in 2021 with the emergence of new ransomware variants, the increasing dangers of supply chain attacks, and the continued risks of staying secure while working remotely. At Coalition, we have a unique…

The night before Christmas brings excitement and joy as families cozy together to enjoy holiday cheer and merriment. But imagine, if deep in the North Pole, surrounded by hand-crafted toys, Santa’s Workshop was experiencing a crisis. Santa had been…

The holidays are a time of goodwill and cheer that offer an opportunity to gather with family, friends, and colleagues. Unfortunately, along with seasonal cheer and a surge in online ordering, the holidays bring an increased risk of cyber security…