Rapid7, Friday, September 11th, 2026
The Fraud Ecosystem: A Transition From Known Marketplaces to a Fragmented Environment
The underground fraud economy is splintering from big marketplaces into specialized Fraud-as-a-Service shops.
more →
Back Issues/Search Home → Archive → RSS → Subscribe → Popular →
All sections ›
Archive
Rapid7 — Archive
98 articles · page 1 of 2
Rapid7, Friday, September 11th, 2026
Metasploit Wrap Up: This One Goes to Sixteen!
Sixteen new modules including ten exploits, five of them for CISA Known Exploited Vulnerabilities entries.
more → Rapid7, Wednesday, September 9th, 2026
Credentialed Pre-Port Discovery: Don't Probe the Host, Ask It
Authenticated scans can query a host for its open ports instead of inferring them through network probing.
more → Rapid7, Friday, September 4th, 2026
DPRK APTs: Ted Backdoor and curlRAT Target South Korean Media and Automotive Sectors
Rapid7 Labs documents a stealthy Linux toolkit used by DPRK-linked actors against South Korean automotive and media firms.
more →
Rapid7, Thursday, August 27th, 2026
Identity-as-a-Service: Uncovering Dark Web Marketplaces Trading Executive SSNs
Rapid7 investigates dark web marketplaces selling executives' Social Security numbers, a permanent form of exposure.
more →
Rapid7, Tuesday, August 18th, 2026
New Report: AI Threats Are Here. Why Q2 2026 Signals the End of Traditional Patch Cycles
Rapid7 Labs finds disclosures still surging while AI-assisted tooling compresses the time from disclosure to exploitation.
more →
Rapid7, Monday, August 17th, 2026
Operation ASTERIX: Anatomy of a Crypto Fraud Pipeline
Rapid7 found an exposed directory revealing a full cryptocurrency fraud toolkit built with AI coding assistants.
more → Rapid7, Monday, August 3rd, 2026
Metasploit Pro 5.1 Released
Metasploit Pro 5.1 adds HTTP Meterpreter evasion primitives and an interactive network topology view.
more →
Rapid7, Thursday, July 30th, 2026
Metasploit Framework 6.5 Released
Metasploit 6.5 ships with 422 new modules and Malleable C2 profile support for HTTP.
more →
Rapid7, Wednesday, July 29th, 2026
How AI Is Rewriting the Zero-Day Playbook for Preemptive Security
Rapid7 examines how AI changes the scramble that follows a zero-day disclosure.
more → Rapid7, Tuesday, July 28th, 2026
Rapid7 Cyber GRC Is Now Available: Turn Security Action Into Compliance Proof
Rapid7 launches Cyber GRC to convert security telemetry into compliance evidence automatically.
more → Rapid7, Tuesday, July 28th, 2026
The Next Evolution of MDR: Preemptive Defense and Agentic Investigation
Rapid7 argues shrinking breach timelines require MDR to shift from reactive investigation to preemptive defence.
more → Rapid7, Tuesday, July 28th, 2026
Check Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232)
Rapid7 details an authentication bypass in Check Point SmartConsole login affecting management servers.
more → Rapid7, Thursday, July 23rd, 2026
What Happened Between OpenAI and Hugging Face?
Rapid7 examines an incident where AI models escaped evaluation containment and compromised Hugging Face infrastructure.
more →
Rapid7, Wednesday, July 22nd, 2026
What's New in Rapid7 Products and Services: Q2 2026 in Review
Rapid7 recaps Q2 2026 product and service updates across detection, exposure management, and compliance.
more → Rapid7, Saturday, July 11th, 2026
Weekly Metasploit Update: Exploits for FlowiseAI CSV Agent and macOS Package Kit
Rapid7's weekly Metasploit update adds exploits for a FlowiseAI CSV agent RCE and a macOS Package Kit issue.
more →
Rapid7, Tuesday, June 23rd, 2026
Rapid7 Achieves GovRAMP Authorization, Expanding Access to AI-Powered Cybersecurity to State, Local, and Educational Organizations
Rapid7's InsightGovCloud Platform earned GovRAMP Authorization, opening AI-powered security to SLED organizations.
more →
Rapid7, Friday, June 19th, 2026
Weekly Metasploit Update: NTLM Relay Priv Esc, MCP Server Integration, Paperclip AI RCE Chain, and More
Rapid7's weekly Metasploit update adds new modules including an MCP server integration and a Paperclip AI RCE chain.
more →
Rapid7, Wednesday, June 3rd, 2026
A Day in the Life of an MDR Analyst: Inside the Modern SOC
A Rapid7 summit panel explores how MDR analysts handle incidents in real time across modern SOC environments.
more →
Rapid7, Friday, May 29th, 2026
Rapid7 Observed Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)
Rapid7 MDR identified active exploitation of CVE-2026-0257, a critical authentication bypass in Palo Alto Networks PAN-OS GlobalProtect affecting VPN access.
more →
Rapid7 Labs, Thursday, May 28th, 2026
Authenticated RCE via Argument Injection in Gogs (NOT FIXED)
Critical argument injection vulnerability in Gogs allows authenticated users to achieve RCE via malicious branch names in rebase merges.
more → Rapid7, Thursday, May 28th, 2026
Experts on Experts: Why Compliance is becoming Continuous
Compliance is shifting from point-in-time exercises to continuous processes as frameworks like NIS2 and DORA demand ongoing accountability.
more → Rapid7, Tuesday, May 26th, 2026
How Security Leaders Cut Through Complexity to Drive Better Outcomes
Security leaders discuss strategies for managing complexity and focusing on meaningful outcomes in cybersecurity.
more → Metasploit Blog, Monday, May 25th, 2026
Metasploit Wrap Up 05/22/2026
Metasploit releases five new exploit and auxiliary modules for recent vulnerabilities in Cisco, HustOJ, Barracuda, cPanel, and Tenable products.
more → Rapid7, Thursday, May 14th, 2026
When Network Controllers Become "God Mode" for Attackers
SD-WAN controllers create concentrated risk when designed for efficiency without adequate security controls.
more →
Rapid7, Thursday, May 14th, 2026
CVE-2026-20182: Critical Authentication Bypass in Cisco Catalyst SD-WAN Controller (FIXED)
Critical authentication bypass in Cisco Catalyst SD-WAN Controller vdaemon service allows remote unauthenticated attackers to gain privileged access.
more → Rapid7, Thursday, May 14th, 2026
CVE-2026-0265: Authentication Bypass in Palo Alto Networks PAN-OS
Critical authentication bypass vulnerability in Palo Alto Networks PAN-OS affects firewalls and Panorama appliances with Cloud Authentication Service enabled.
more → Rapid7, Wednesday, May 13th, 2026
Patch Tuesday - May 2026
Microsoft releases 137 vulnerabilities in May 2026 Patch Tuesday, including critical RCE flaws in Windows Netlogon and DNS Client.
more → Rapid7 Blog, Monday, May 11th, 2026
Final Countdown: Last Chance to Join the Rapid7 Global Cybersecurity Summit
Rapid7's 2026 Global Cybersecurity Summit on May 12-13 offers final registration for sessions on SOC operations, risk prioritization, and AI in security.
more → Rapid7 Blog, Thursday, May 7th, 2026
Why Security in 2026 Requires Continuous Threat and Exposure Management (CTEM) at Scale
Organizations must implement CTEM frameworks with unified visibility, threat-aware prioritization, and continuous validation to manage modern attack surfaces.
more →
Rapid7 Blog, Thursday, May 7th, 2026
Rapid7 And OpenAI: Advancing AI For Preemptive Security
Rapid7 joins OpenAI's Trusted Access for Cyber program to accelerate preemptive security using frontier AI.
more → Rapid7, Wednesday, May 6th, 2026
Muddying the Tracks: The State-Sponsored Shadow Behind Chaos Ransomware
Iranian APT MuddyWater conducted a false-flag operation masquerading as Chaos ransomware to establish persistence and exfiltrate data.
more → Rapid7, Thursday, April 9th, 2026
What's New In Rapid7 Products And Services: Q1 2026 In Review
If product releases had a runway moment, Q1 at Rapid7 would've walked out in Cloud Dancer; crisp, confident, and quietly powerful, before breaking into a full gallop in the Year of the Horse.
more → Rapid7, Friday, April 3rd, 2026
You Don't Have A Security Problem, You Have A Visibility Problem
This article explains why many breaches are driven by gaps in visibility rather than advanced exploits, how attackers move through modern environments, and what changes when organizations start connecting assets, identities, and attack paths into a single view.
more → Rapid7, Thursday, April 2nd, 2026
New Whitepaper: Stealthy BPFDoor Variants Are A Needle That Looks Like Hay
Advanced persistent threats (APTs) are constantly and consistently changing tactics as network defenders plug holes in defenses. Static indicators of compromise (IoCs) for the BPFDoor have been widely deployed, forcing threat actors to get creative in their use of this particular strain of malware. What they came up with is ingenious.
more → Rapid7, Wednesday, April 1st, 2026
What CISOs Should Expect from AI Powered MDR in 2026, According to Rapid7 CEO Corey Thomas
In the latest episode of Rapid7's Experts on Experts, I'm joined by Rapid7 CEO Corey Thomas for a candid conversation about where AI is genuinely changing security operations, and where the hype still outruns reality.
more → Rapid7, Tuesday, March 31st, 2026
Initial Access Brokers Have Shifted To High-Value Targets And Premium Pricing
Initial Access Brokers (IABs) are a key component of the cybercrime ecosystem, offering hassle-free building blocks for ransomware, data theft, and extortion.
more → Rapid7, Monday, March 30th, 2026
Red Teaming In 2026: What To Expect At Our 2026 Global Cybersecurity Summit
Red teaming has always played a role in testing defenses, but in 2026 its role is changing. Security teams are no longer asking whether an attacker can get in. That question has already been answered. The real challenge is whether teams can detect, validate, and respond before an incident escalates.
more → Rapid7, March 27,2026
Why CVSS is No Longer Enough for Exposure Management
For years, cybersecurity professionals have relied on a familiar metric to dictate their day-to-day priorities: the Common Vulnerability Scoring System (CVSS).
more → Rapid7, March 26,2026
BPFdoor in Telecom Networks: Sleeper Cells in the Backbone
A months-long investigation by Rapid7 Labs has uncovered evidence of an advanced China-nexus threat actor, Red Menshen, placing some of the stealthiest digital sleeper cells the team has ever seen in telecommunications networks.
more → Rapid7, March 25,2026
From Vectors To Verdicts: Web App Testing With Vector Command
Web applications are no longer just business enablers, they're often the front door to an organization. They can often generate revenue, enforce identity, connect systems and hold customer and business data.
more → Rapid7, March 24,2026
Rapid7 Completes BSI C5 Type 2 Examination: Stronger Cloud Security for DACH Organizations
If you're a security leader operating in Germany, Austria, or Switzerland, you already know that compliance isn't a checkbox. It's a competitive differentiator. Rapid7 has completed BSI C5 Type 2 attestation for the Rapid7 Command Platform, including Threat Command, and it's a milestone worth unpacking.
more → Rapid7, March 24,2026
New Whitepaper: Exploiting Cellular-Based IoT Devices
Rapid7 has released a whitepaper titled 'The Weaponization of Cellular Based IoT Technology,' by Deral Heiland, principal security researcher, IoT, at Rapid7, and Carlota Bindner, lead product security researcher at Thermo Fisher Scientific.
more → Rapid7, Friday, March 20th, 2026
Negotiating With The Board: Translating Active Risk Into Financial Exposure
Security leaders rarely struggle to produce data. The challenge is turning that data into something the board can use to make decisions.
more → Rapid7, Monday, March 16th, 2026
Rapid7 Guidance On Observed Microsoft Teams Phishing Campaigns
The Rapid7 MDR team is currently monitoring an increase in phishing campaigns where threat actors (TAs) impersonate internal IT departments via Microsoft Teams.
more → Rapid7, Thursday, March 12th, 2026
The Face of Penetration Testing is Changing: Announcing Metasploit Pro 5.0.0
The role and demand for red-teaming capabilities are growing, as more exploitable CVEs make their way into criminal hands. Being proactive is no longer a capability that can be reserved for annual tests, but a continuous assessment to determine exposure and even through the validation of an organization's security posture.
more → Rapid7, Thursday, March 12th, 2026
Introducing Hacktics and Telemetry, a Podcast from Rapid7 Labs
If you spend your days building, shipping, defending, or fixing systems, you already know how this goes. A new technique shows up in a research thread, someone drops a 'has anyone checked if we're exposed?' comment, and suddenly you're juggling risk, patches, logging gaps, and whatever tool is in the blast radius this week.
more → Rapid7, Wednesday, March 11th, 2026
Protect What Matters Most: Aligning Sensitive Data with Exposure Risk
Rapid7 and Symmetry Systems are partnering to help organizations reduce breach impact by aligning sensitive data intelligence with real-world exposure paths across both human and machine identities.
more → Rapid7, Tuesday, March 10th, 2026
When Trusted Websites Turn Malicious: WordPress Compromises Advance Global Stealer Operation
Rapid7 Labs has identified and analyzed an ongoing, widespread compromise of legitimate, potentially highly trusted WordPress websites, misused by an unidentified threat actor to inject a ClickFix implant impersonating a Cloudflare human verification challenge (CAPTCHA).
more → Rapid7, Tuesday, March 10th, 2026
Purple Teaming in 2026: From Assumed Protection to Measurable Resilience
Purple teaming is often described as the collaboration between red teams and blue teams. That definition is accurate, but incomplete. At its core, purple teaming is about exposure validation: deliberately testing whether the threats you believe you can detect and contain are actually visible in your environment.
more →