Global – October 27, 2026 -- Coalition's newly appointed Chief Information Security Officer, a 25-year InfoSec veteran, argues that security teams run on a finite supply of organizational trust, and that high-friction controls drain it and push staff toward less-protected workarounds.

Global – October 27, 2026 -- Two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, each carry a CVSS score of 9.2 and let unauthenticated attackers run code on web servers. Cyber insurer Coalition says its honeypots recorded exploit-related requests more than five hours before PHP released its fix, and it expects exploitation at scale.

United States – October 17, 2026 -- Coalition says policies it provided paid more than $315 million in cyber claims in 2025. The insurer is urging brokers to counter the belief that cyber insurance does not pay claims, an objection it says can stall coverage decisions.

London – October 17, 2026 -- Coalition reports 130,000+ global policyholders and $1 billion in global gross written premium on a proforma basis, figures it presented at the debut of Activate Europe, its largest cyber broker event outside the US.

The event drew brokers, underwriters, reinsurers, incident response firms and legal experts, according to the company.

Global – October 17, 2026 -- Coalition says its Wirespeed platform cuts alert noise by 99.99% before any alert reaches a customer queue, replacing analyst-driven managed detection and response (MDR) with automated verdicts and containment in milliseconds.

Global – October 17, 2026 -- Citrix confirmed on September 27 that two critical NetScaler zero-day vulnerabilities, each scoring 9.5 in severity, were exploited in the wild. According to cyber insurer Coalition, the vendor's public communications lagged the first reports by at least 36 hours.

Global -- Coalition sent just 49 Zero-Day Alerts (ZDAs) between May 1 and August 1, 2026, even as Microsoft's July Patch Tuesday swelled to 569 vulnerabilities, and 94% of its policyholders did not receive a single one.

Global – October 17, 2026 -- ConnectWise is investigating attempted unauthorized access to its Cloud Backup for Microsoft 365 service, formerly SkyKick Cloud Backup, after disclosing the incident on October 16. The company says containment measures are in place and it has no indication that partner backup data was accessed. The investigation is ongoing.