115 articles · page 1 of 3
Rapid7, Thursday, November 5th, 2026
Rapid7 offers a Gartner report arguing frontier AI like Mythos shrinks the time between weaknesses and exploits, demanding outcome-based security.
more →
Rapid7, Wednesday, November 4th, 2026
Rapid7 explains CISA's BOD 26-04, which sets a three-day remediation deadline for certain exploited flaws, and maps it to Rapid7 capabilities.
more → Rapid7, Wednesday, November 4th, 2026
Rapid7 has achieved ISO/IEC 42001:2023 certification for its AI Management System following an independent audit by Schellman.
more → Rapid7, Tuesday, October 27th, 2026
Rapid7 adds SCIM support to its Command Platform to automate user provisioning and deprovisioning through identity providers.
more →
Rapid7, Friday, October 23rd, 2026
Rapid7's Metasploit release adds six Langflow modules plus a pre-auth RCE chain and other new modules.
more →
Rapid7, Wednesday, October 21st, 2026
Rapid7's quarterly report finds AI plays an operational role in only 8% of incidents, while exploits arrive within days.
more → Rapid7, Wednesday, October 21st, 2026
Rapid7's Q3 threat report finds high-severity vulnerabilities are exploited three days after disclosure on average.
more → Rapid7, Monday, October 19th, 2026
Rapid7 argues controls on AI agents must live outside the agent and explains how SOC teams can enforce them.
more → Rapid7, Friday, October 9th, 2026
This week's Metasploit release adds 12 modules, including LLM-targeting scanners, Linux LPEs and an N-able N-central RCE.
more →
Rapid7, Wednesday, October 7th, 2026
Rapid7 examines the hostile push notification sent through ASOS's own app and what attacker use of trusted channels means for defenders.
more → Rapid7, Wednesday, October 7th, 2026
Rapid7 explains how FERPA, GLBA, HIPAA and CMMC obligations make fragmented multi-campus university security a regulatory risk.
more → Rapid7, Tuesday, October 6th, 2026
Rapid7 argues autonomous AI agents must be treated as first-class identities, with delegation, behavior and tool use monitored.
more → Rapid7, Friday, October 2nd, 2026
Rapid7 analyzes a new BPFDoor variant, a BPF Rekoobe build and the AVERAT Linux implant targeting telecom and edge devices.
more →
Rapid7, Thursday, October 1st, 2026
Rapid7 highlights Gartner research on how SOC roles, skills and KPIs must be redesigned as AI takes over triage work.
more → Rapid7, Wednesday, September 30th, 2026
Rapid7 on why universities are hard to secure and how fragmented tooling slows their response to rising attacks.
more → Rapid7, Wednesday, September 23rd, 2026
Rapid7 and Zimbra research found 50+ vulnerabilities letting attackers impersonate senders and rewrite inboxes without credentials.
more →
Rapid7, Wednesday, September 23rd, 2026
Rapid7 explains how dynamic application security testing reproduces exploits at runtime, valuable for APIs and AI-backed applications.
more → Rapid7, Friday, September 11th, 2026
The underground fraud economy is splintering from big marketplaces into specialized Fraud-as-a-Service shops.
more →
Rapid7, Friday, September 11th, 2026
Sixteen new modules including ten exploits, five of them for CISA Known Exploited Vulnerabilities entries.
more → Rapid7, Wednesday, September 9th, 2026
Authenticated scans can query a host for its open ports instead of inferring them through network probing.
more → Rapid7, Friday, September 4th, 2026
Rapid7 Labs documents a stealthy Linux toolkit used by DPRK-linked actors against South Korean automotive and media firms.
more →
Rapid7, Thursday, August 27th, 2026
Rapid7 investigates dark web marketplaces selling executives' Social Security numbers, a permanent form of exposure.
more →
Rapid7, Tuesday, August 18th, 2026
Rapid7 Labs finds disclosures still surging while AI-assisted tooling compresses the time from disclosure to exploitation.
more →
Rapid7, Monday, August 17th, 2026
Rapid7 found an exposed directory revealing a full cryptocurrency fraud toolkit built with AI coding assistants.
more → Rapid7, Monday, August 3rd, 2026
Metasploit Pro 5.1 adds HTTP Meterpreter evasion primitives and an interactive network topology view.
more →
Rapid7, Thursday, July 30th, 2026
Metasploit 6.5 ships with 422 new modules and Malleable C2 profile support for HTTP.
more →
Rapid7, Wednesday, July 29th, 2026
Rapid7 examines how AI changes the scramble that follows a zero-day disclosure.
more → Rapid7, Tuesday, July 28th, 2026
Rapid7 launches Cyber GRC to convert security telemetry into compliance evidence automatically.
more → Rapid7, Tuesday, July 28th, 2026
Rapid7 argues shrinking breach timelines require MDR to shift from reactive investigation to preemptive defence.
more → Rapid7, Tuesday, July 28th, 2026
Rapid7 details an authentication bypass in Check Point SmartConsole login affecting management servers.
more → Rapid7, Thursday, July 23rd, 2026
Rapid7 examines an incident where AI models escaped evaluation containment and compromised Hugging Face infrastructure.
more →
Rapid7, Wednesday, July 22nd, 2026
Rapid7 recaps Q2 2026 product and service updates across detection, exposure management, and compliance.
more → Rapid7, Saturday, July 11th, 2026
Rapid7's weekly Metasploit update adds exploits for a FlowiseAI CSV agent RCE and a macOS Package Kit issue.
more →
Rapid7, Tuesday, June 23rd, 2026
Rapid7's InsightGovCloud Platform earned GovRAMP Authorization, opening AI-powered security to SLED organizations.
more →
Rapid7, Friday, June 19th, 2026
Rapid7's weekly Metasploit update adds new modules including an MCP server integration and a Paperclip AI RCE chain.
more →
Rapid7, Wednesday, June 3rd, 2026
A Rapid7 summit panel explores how MDR analysts handle incidents in real time across modern SOC environments.
more →
Rapid7, Friday, May 29th, 2026
Rapid7 MDR identified active exploitation of CVE-2026-0257, a critical authentication bypass in Palo Alto Networks PAN-OS GlobalProtect affecting VPN access.
more →
Rapid7 Labs, Thursday, May 28th, 2026
Critical argument injection vulnerability in Gogs allows authenticated users to achieve RCE via malicious branch names in rebase merges.
more → Rapid7, Thursday, May 28th, 2026
Compliance is shifting from point-in-time exercises to continuous processes as frameworks like NIS2 and DORA demand ongoing accountability.
more → Rapid7, Tuesday, May 26th, 2026
Security leaders discuss strategies for managing complexity and focusing on meaningful outcomes in cybersecurity.
more → Metasploit Blog, Monday, May 25th, 2026
Metasploit releases five new exploit and auxiliary modules for recent vulnerabilities in Cisco, HustOJ, Barracuda, cPanel, and Tenable products.
more → Rapid7, Thursday, May 14th, 2026
SD-WAN controllers create concentrated risk when designed for efficiency without adequate security controls.
more →
Rapid7, Thursday, May 14th, 2026
Critical authentication bypass in Cisco Catalyst SD-WAN Controller vdaemon service allows remote unauthenticated attackers to gain privileged access.
more → Rapid7, Thursday, May 14th, 2026
Critical authentication bypass vulnerability in Palo Alto Networks PAN-OS affects firewalls and Panorama appliances with Cloud Authentication Service enabled.
more → Rapid7, Wednesday, May 13th, 2026
Microsoft releases 137 vulnerabilities in May 2026 Patch Tuesday, including critical RCE flaws in Windows Netlogon and DNS Client.
more → Rapid7 Blog, Monday, May 11th, 2026
Rapid7's 2026 Global Cybersecurity Summit on May 12-13 offers final registration for sessions on SOC operations, risk prioritization, and AI in security.
more → Rapid7 Blog, Thursday, May 7th, 2026
Organizations must implement CTEM frameworks with unified visibility, threat-aware prioritization, and continuous validation to manage modern attack surfaces.
more →
Rapid7 Blog, Thursday, May 7th, 2026
Rapid7 joins OpenAI's Trusted Access for Cyber program to accelerate preemptive security using frontier AI.
more → Rapid7, Wednesday, May 6th, 2026
Iranian APT MuddyWater conducted a false-flag operation masquerading as Chaos ransomware to establish persistence and exfiltrate data.
more → Rapid7, Thursday, April 9th, 2026
If product releases had a runway moment, Q1 at Rapid7 would've walked out in Cloud Dancer; crisp, confident, and quietly powerful, before breaking into a full gallop in the Year of the Horse.
more →