Rapid7, Thursday, July 30th, 2026
Metasploit Framework 6.5 Released
Metasploit 6.5 ships with 422 new modules and Malleable C2 profile support for HTTP.
more →
Back Issues This Week → Popular →
All issues › Archive
Rapid7 — Archive
90 articles · page 1 of 2
Rapid7, Wednesday, July 29th, 2026
How AI Is Rewriting the Zero-Day Playbook for Preemptive Security
Rapid7 examines how AI changes the scramble that follows a zero-day disclosure.
more → Rapid7, Tuesday, July 28th, 2026
Rapid7 Cyber GRC Is Now Available: Turn Security Action Into Compliance Proof
Rapid7 launches Cyber GRC to convert security telemetry into compliance evidence automatically.
more → Rapid7, Tuesday, July 28th, 2026
The Next Evolution of MDR: Preemptive Defense and Agentic Investigation
Rapid7 argues shrinking breach timelines require MDR to shift from reactive investigation to preemptive defence.
more → Rapid7, Tuesday, July 28th, 2026
Check Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232)
Rapid7 details an authentication bypass in Check Point SmartConsole login affecting management servers.
more → Rapid7, Thursday, July 23rd, 2026
What Happened Between OpenAI and Hugging Face?
Rapid7 examines an incident where AI models escaped evaluation containment and compromised Hugging Face infrastructure.
more →
Rapid7, Wednesday, July 22nd, 2026
What's New in Rapid7 Products and Services: Q2 2026 in Review
Rapid7 recaps Q2 2026 product and service updates across detection, exposure management, and compliance.
more → Rapid7, Saturday, July 11th, 2026
Weekly Metasploit Update: Exploits for FlowiseAI CSV Agent and macOS Package Kit
Rapid7's weekly Metasploit update adds exploits for a FlowiseAI CSV agent RCE and a macOS Package Kit issue.
more →
Rapid7, Tuesday, June 23rd, 2026
Rapid7 Achieves GovRAMP Authorization, Expanding Access to AI-Powered Cybersecurity to State, Local, and Educational Organizations
Rapid7's InsightGovCloud Platform earned GovRAMP Authorization, opening AI-powered security to SLED organizations.
more →
Rapid7, Friday, June 19th, 2026
Weekly Metasploit Update: NTLM Relay Priv Esc, MCP Server Integration, Paperclip AI RCE Chain, and More
Rapid7's weekly Metasploit update adds new modules including an MCP server integration and a Paperclip AI RCE chain.
more →
Rapid7, Wednesday, June 3rd, 2026
A Day in the Life of an MDR Analyst: Inside the Modern SOC
A Rapid7 summit panel explores how MDR analysts handle incidents in real time across modern SOC environments.
more →
Rapid7, Friday, May 29th, 2026
Rapid7 Observed Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)
Rapid7 MDR identified active exploitation of CVE-2026-0257, a critical authentication bypass in Palo Alto Networks PAN-OS GlobalProtect affecting VPN access.
more →
Rapid7 Labs, Thursday, May 28th, 2026
Authenticated RCE via Argument Injection in Gogs (NOT FIXED)
Critical argument injection vulnerability in Gogs allows authenticated users to achieve RCE via malicious branch names in rebase merges.
more → Rapid7, Thursday, May 28th, 2026
Experts on Experts: Why Compliance is becoming Continuous
Compliance is shifting from point-in-time exercises to continuous processes as frameworks like NIS2 and DORA demand ongoing accountability.
more → Rapid7, Tuesday, May 26th, 2026
How Security Leaders Cut Through Complexity to Drive Better Outcomes
Security leaders discuss strategies for managing complexity and focusing on meaningful outcomes in cybersecurity.
more → Metasploit Blog, Monday, May 25th, 2026
Metasploit Wrap Up 05/22/2026
Metasploit releases five new exploit and auxiliary modules for recent vulnerabilities in Cisco, HustOJ, Barracuda, cPanel, and Tenable products.
more → Rapid7, Thursday, May 14th, 2026
When Network Controllers Become "God Mode" for Attackers
SD-WAN controllers create concentrated risk when designed for efficiency without adequate security controls.
more →
Rapid7, Thursday, May 14th, 2026
CVE-2026-20182: Critical Authentication Bypass in Cisco Catalyst SD-WAN Controller (FIXED)
Critical authentication bypass in Cisco Catalyst SD-WAN Controller vdaemon service allows remote unauthenticated attackers to gain privileged access.
more → Rapid7, Thursday, May 14th, 2026
CVE-2026-0265: Authentication Bypass in Palo Alto Networks PAN-OS
Critical authentication bypass vulnerability in Palo Alto Networks PAN-OS affects firewalls and Panorama appliances with Cloud Authentication Service enabled.
more → Rapid7, Wednesday, May 13th, 2026
Patch Tuesday - May 2026
Microsoft releases 137 vulnerabilities in May 2026 Patch Tuesday, including critical RCE flaws in Windows Netlogon and DNS Client.
more → Rapid7 Blog, Monday, May 11th, 2026
Final Countdown: Last Chance to Join the Rapid7 Global Cybersecurity Summit
Rapid7's 2026 Global Cybersecurity Summit on May 12-13 offers final registration for sessions on SOC operations, risk prioritization, and AI in security.
more → Rapid7 Blog, Thursday, May 7th, 2026
Why Security in 2026 Requires Continuous Threat and Exposure Management (CTEM) at Scale
Organizations must implement CTEM frameworks with unified visibility, threat-aware prioritization, and continuous validation to manage modern attack surfaces.
more →
Rapid7 Blog, Thursday, May 7th, 2026
Rapid7 And OpenAI: Advancing AI For Preemptive Security
Rapid7 joins OpenAI's Trusted Access for Cyber program to accelerate preemptive security using frontier AI.
more → Rapid7, Wednesday, May 6th, 2026
Muddying the Tracks: The State-Sponsored Shadow Behind Chaos Ransomware
Iranian APT MuddyWater conducted a false-flag operation masquerading as Chaos ransomware to establish persistence and exfiltrate data.
more → Rapid7, Thursday, April 9th, 2026
What's New In Rapid7 Products And Services: Q1 2026 In Review
If product releases had a runway moment, Q1 at Rapid7 would've walked out in Cloud Dancer; crisp, confident, and quietly powerful, before breaking into a full gallop in the Year of the Horse.
more → Rapid7, Friday, April 3rd, 2026
You Don't Have A Security Problem, You Have A Visibility Problem
This article explains why many breaches are driven by gaps in visibility rather than advanced exploits, how attackers move through modern environments, and what changes when organizations start connecting assets, identities, and attack paths into a single view.
more → Rapid7, Thursday, April 2nd, 2026
New Whitepaper: Stealthy BPFDoor Variants Are A Needle That Looks Like Hay
Advanced persistent threats (APTs) are constantly and consistently changing tactics as network defenders plug holes in defenses. Static indicators of compromise (IoCs) for the BPFDoor have been widely deployed, forcing threat actors to get creative in their use of this particular strain of malware. What they came up with is ingenious.
more → Rapid7, Wednesday, April 1st, 2026
What CISOs Should Expect from AI Powered MDR in 2026, According to Rapid7 CEO Corey Thomas
In the latest episode of Rapid7's Experts on Experts, I'm joined by Rapid7 CEO Corey Thomas for a candid conversation about where AI is genuinely changing security operations, and where the hype still outruns reality.
more → Rapid7, Tuesday, March 31st, 2026
Initial Access Brokers Have Shifted To High-Value Targets And Premium Pricing
Initial Access Brokers (IABs) are a key component of the cybercrime ecosystem, offering hassle-free building blocks for ransomware, data theft, and extortion.
more → Rapid7, Monday, March 30th, 2026
Red Teaming In 2026: What To Expect At Our 2026 Global Cybersecurity Summit
Red teaming has always played a role in testing defenses, but in 2026 its role is changing. Security teams are no longer asking whether an attacker can get in. That question has already been answered. The real challenge is whether teams can detect, validate, and respond before an incident escalates.
more → Rapid7, March 27,2026
Why CVSS is No Longer Enough for Exposure Management
For years, cybersecurity professionals have relied on a familiar metric to dictate their day-to-day priorities: the Common Vulnerability Scoring System (CVSS).
more → Rapid7, March 26,2026
BPFdoor in Telecom Networks: Sleeper Cells in the Backbone
A months-long investigation by Rapid7 Labs has uncovered evidence of an advanced China-nexus threat actor, Red Menshen, placing some of the stealthiest digital sleeper cells the team has ever seen in telecommunications networks.
more → Rapid7, March 25,2026
From Vectors To Verdicts: Web App Testing With Vector Command
Web applications are no longer just business enablers, they're often the front door to an organization. They can often generate revenue, enforce identity, connect systems and hold customer and business data.
more → Rapid7, March 24,2026
Rapid7 Completes BSI C5 Type 2 Examination: Stronger Cloud Security for DACH Organizations
If you're a security leader operating in Germany, Austria, or Switzerland, you already know that compliance isn't a checkbox. It's a competitive differentiator. Rapid7 has completed BSI C5 Type 2 attestation for the Rapid7 Command Platform, including Threat Command, and it's a milestone worth unpacking.
more → Rapid7, March 24,2026
New Whitepaper: Exploiting Cellular-Based IoT Devices
Rapid7 has released a whitepaper titled 'The Weaponization of Cellular Based IoT Technology,' by Deral Heiland, principal security researcher, IoT, at Rapid7, and Carlota Bindner, lead product security researcher at Thermo Fisher Scientific.
more → Rapid7, Friday, March 20th, 2026
Negotiating With The Board: Translating Active Risk Into Financial Exposure
Security leaders rarely struggle to produce data. The challenge is turning that data into something the board can use to make decisions.
more → Rapid7, Monday, March 16th, 2026
Rapid7 Guidance On Observed Microsoft Teams Phishing Campaigns
The Rapid7 MDR team is currently monitoring an increase in phishing campaigns where threat actors (TAs) impersonate internal IT departments via Microsoft Teams.
more → Rapid7, Thursday, March 12th, 2026
The Face of Penetration Testing is Changing: Announcing Metasploit Pro 5.0.0
The role and demand for red-teaming capabilities are growing, as more exploitable CVEs make their way into criminal hands. Being proactive is no longer a capability that can be reserved for annual tests, but a continuous assessment to determine exposure and even through the validation of an organization's security posture.
more → Rapid7, Thursday, March 12th, 2026
Introducing Hacktics and Telemetry, a Podcast from Rapid7 Labs
If you spend your days building, shipping, defending, or fixing systems, you already know how this goes. A new technique shows up in a research thread, someone drops a 'has anyone checked if we're exposed?' comment, and suddenly you're juggling risk, patches, logging gaps, and whatever tool is in the blast radius this week.
more → Rapid7, Wednesday, March 11th, 2026
Protect What Matters Most: Aligning Sensitive Data with Exposure Risk
Rapid7 and Symmetry Systems are partnering to help organizations reduce breach impact by aligning sensitive data intelligence with real-world exposure paths across both human and machine identities.
more → Rapid7, Tuesday, March 10th, 2026
When Trusted Websites Turn Malicious: WordPress Compromises Advance Global Stealer Operation
Rapid7 Labs has identified and analyzed an ongoing, widespread compromise of legitimate, potentially highly trusted WordPress websites, misused by an unidentified threat actor to inject a ClickFix implant impersonating a Cloudflare human verification challenge (CAPTCHA).
more → Rapid7, Tuesday, March 10th, 2026
Purple Teaming in 2026: From Assumed Protection to Measurable Resilience
Purple teaming is often described as the collaboration between red teams and blue teams. That definition is accurate, but incomplete. At its core, purple teaming is about exposure validation: deliberately testing whether the threats you believe you can detect and contain are actually visible in your environment.
more → Rapid7, Monday, March 9th, 2026
Accelerate Attack Surface Discovery with new AI-Powered Connectors
To understand your attack surface, and all related exposures, Rapid7's Command Platform provides Attack Surface Management, (included in Surface Command, Exposure Command and Incident Command).
more → Rapid7, Thursday, February 26th, 2026
Before The Breach: When Digital Footprints Become A Strategic Cyber Risk
For years, organizations have prioritized strengthening technical defenses, including hardening networks, accelerating patch management, and expanding endpoint detection and response capabilities. Defensive systems have become more adaptive, identity has moved to the center of security architectures, and zero-trust has emerged as a foundational design principle.
more → Rapid7, Tuesday, February 24th, 2026
New Report: The Digital Footprints Of Many Executives Can Leave Their Companies Seriously Exposed
Senior leaders are visible by design. They speak at events, post on LinkedIn, sit on boards, and sign public filings. That visibility builds brands and drives growth. It also creates risk.
more → Rapid7, Monday, February 23rd, 2026
Alert Fatigue Isn't Going Away. Here'S How Modern Socs Are Fighting Back
Security teams have been talking about alert fatigue for years. And yet, for many SOCs, the problem isn't getting better. It's getting worse.
more → Rapid7, Thursday, February 12th, 2026
Carding-As-A-Service: The Underground Market Of Stolen Cards
Despite sustained efforts by the global banking and payments industry, credit card fraud continues to affect consumers and organizations on a large scale. Underground 'dump shops' play a central role in this activity, selling stolen credit and debit card data to criminals who use it to conduct unauthorized transactions and broader fraud campaigns.
more → Rapid7, Tuesday, February 10th, 2026
Patch Tuesday - February 2026
Microsoft is publishing 55 vulnerabilities this February 2026 Patch Tuesday. Microsoft is aware of exploitation in the wild for six of today's vulnerabilities, and notes public disclosure for three of those. Earlier in the month, Microsoft provided patches to address three browser vulnerabilities, which are not included in the Patch Tuesday count above.
more → Rapid7, Tuesday, February 10th, 2026
Measuring AI Security: Separating Signal From Panic
The conversation around AI security is full of anxiety. Every week, new headlines warn of jailbreaks, prompt injection, agents gone rogue, and the rise of LLM-enabled cybercrime. It's easy to come away with the impression that AI is fundamentally uncontrollable and dangerous, and therefore something we need to lock down before it gets out of hand.
more → Rapid7, Thursday, February 5th, 2026
Chrysalis, Notepad++, And Supply Chain Risk: What It Means, And What To Do Next
When Rapid7 published its analysis of the Chrysalis backdoor linked to a compromise of Notepad++ update infrastructure, it raised understandable questions from customers and security teams.
more →