Incident Response

LockBit Ransomware Used in Exploitation of ConnectWise ScreenConnect
Coalition Incident Response has discovered a link between the LockBit ransomware gang and the ConnectWise ScreenConnect vulnerabilities.

Ivanti VPN Zero-Day Avoided with Device Isolation
Two zero-day vulnerabilities are impacting Ivanti VPN devices. Learn how proactive outreach to Coalition policyholders is helping mitigate the threat.

QR Codes Increasingly Used in Phishing Attacks
Threat actors are using QR codes in phishing attacks to gain access to business networks. Learn the risks and how to evaluate a QR code for legitimacy.

Coalition Security Services: More Protection From Cyber Risk
Learn about our expanded security offering, Coalition Security Services, and how it can help protect your business from cyber risks.

Everything You Always Wanted to Know About Ransomware Negotiation (But Were Afraid to Ask)
Have you ever wondered how ransomware negotiations and payments happen? An Incident Responder breaks down everything from crypto to AI and more.

Pay on Behalf: Why Coalition Coverage Handles Upfront Costs for Policyholders
Cyber events can be costly, and most businesses can’t afford a massive loss. So who’s responsible for payment while an insurance claim is in progress?

SysAid Zero-Day Exploited to Deploy Ransomware
A vulnerability targeting SysAid On-Prem allows threat actors to deploy ransomware. Learn how Coalition Security Labs is responding.

Security Alert: Phishing Link Leads to Ransomware Download
Attackers can use phishing to steal money and information or deploy ransomware. Learn about a recent phishing campaign and the dangers it poses.

Maintaining Credible Data Backups to Minimize Downtime
A manufacturer’s ransomware claim at Coalition emphasizes the importance of maintaining reliable data backups for incident recovery.

Ransomware Claim Illustrates Importance of Early Reporting
Discover why notification at the first sign of a cyber incident gives businesses the greatest chance at recovering without significant loss.

Security Alert: MFA Spamming Attacks Increase Cyber Claims
MFA fatigue, overwhelming users with constant authentication requests, can lead to cyber insurance claims. Learn what mitigations are available.

How Coalition Recovered $5.5M After Funds Transfer Fraud
After a Coalition policyholder mistakenly wired money to a fraudulent account, our claims team jumped into action and recovered 85% of the initial loss.

Security Alert: MOVEit Zero-day Exploited for Data Theft
A zero-day vulnerability targeting MOVEit allows threat actors to mass-download files. Learn about how Coalition Security Labs is responding.

Incident Response Impact: A Tale of Two Cyber Claims
When it comes to cyber incidents, time is critical. Learn why speed matters from two real case studies and how Coalition can help.
