The Curious Engineer

Rapid7 Cybersecurity Blog

2020–2026

1,402 posts

← 2006–2019

2026 130

October 2026

  1. Rapid7 Analysis: Unauthenticated File Upload to RCE in BeyondTrust Remote Support (CVE-2026-102764)
  2. How Rapid7 InsightGovCloud Supports BOD 22-01 Compliance
  3. Simplify User Access Management with SCIM on Rapid7 Command Platform
  4. CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decoder
  5. Metasploit Wrap Up: Langflow, MongoDB, and More
  6. CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP
  7. Q3 2026 Threat Update: Attackers Are Exploiting Vulnerabilities Within 3 Days
  8. Your Next Insider Threat Won’t be Human: Securing AI Agents From the Outside in
  9. Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED)
  10. Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779
  11. CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild
  12. Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)
  13. Rapid7 Intelligence Wins the 2026 Péter Szőr Award for Outstanding Research
  14. How Multi-Campus Universities can Build a more Connected Security Program
  15. From One Account to Every Mailbox: Breaking Zimbra's Identity Boundaries (Part 1)
  16. Unauthenticated SQL Injection In Channel Software WebAlliance eCommerce
  17. Patch Tuesday - October 2026
  18. Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)
  19. CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab
  20. Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules
  21. Four compliance frameworks, one security team: Why fragmented university security raises regulatory risk
  22. CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products
  23. The ASOS Incident: When Attackers Use the Channels Customers Trust
  24. Securing Agent-to-Agent Communication: The Next Identity Frontier

September 2026

  1. Gartner Report: How AI Is Changing the Roles Required in the Security Operations CenterRapid7
  2. Etr critical cisco catalyst sd wan manager api authentication bypass exploited in the wild cve 2026 76504
  3. Higher education is under siege, and fragmented security is making it harder to respond
  4. SMTP is the key: BPFDoor and AVERAT hitting the network edgeRapid7 Intelligence
  5. Etr zero day exploitation of citrix netscaler adc and gateway cve 2026 88771 and cve 2026 88772
  6. Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?The Metasploit Team
  7. Rapid7 Intelligence and Zimbra: When Business Email Compromise Starts Rewriting Reality
  8. New IDC Marketscape: How DAST validates risk at runtime
  9. Etr cve 2026 94127 critical unauthenticated rce in f5 big ip apm
  10. Etr cve 2026 76461 critical cisco secure email gateway vulnerability exploited in the wild
  11. Rapid7 Named Among Notable Vendors in Forrester MDR Landscape: Why the Future is Exposure-informed, Preemptive MDRRapid7
  12. Etr cve 2026 85706 critical gitlab path traversal exploited in the wild
  13. The Fraud Ecosystem: A Transition From Known Marketplaces to a Fragmented EnvironmentGal Givon
  14. Metasploit Wrap Up: This One Goes to Sixteen!Brendan Watters
  15. Credentialed Pre-Port Discovery: Don't Probe the Host, Ask it
  16. Em patch tuesday september 2026
  17. Ve cve 2026 86206 cve 2026 86207 n able n central authentication bypass fixed
  18. DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors
  19. Etr critical sonicwall sma1000 vulnerabilities cve 2026 83548 cve 2026 83549 exploited in the wild

August 2026

  1. Metasploit Wrap Up: Payloads and Exploits, and Scanners, Oh my!
  2. Etr papercut ng mf critical zero day exploited in the wild
  3. Identity-as-a-Service: Uncovering Dark Web Marketplaces Trading Executive SSNs
  4. Ra microsoft sharepoint remote code execution cve 2026 63520
  5. Etr cve 2026 19490 critical vulnerability affecting citrix netscaler adc and netscaler gateway
  6. Rapid7 and Licencias OnLine Partner to Accelerate Cybersecurity Maturity across Latin America
  7. New Report from Rapid7 Labs: Why Q2 2026 signals the end of traditional patch cycles
  8. Rapid7 Labs: the Anatomy of a Crypto Fraud Pipeline
  9. Pt metasploit wrap up lot of summer shells and fit http profiles
  10. Rapid7 and Starlink: Africa’s Cybersecurity Challenge is Bigger than Access to Technology
  11. New Report: 500 Security Leaders Reveal How AI Is Transforming Security Operations
  12. Em patch tuesday august 2026
  13. Rapid7 and Microsoft disclose CVE-2026-63520, a new SharePoint Remote Code Execution vulnerability
  14. Microsoft SharePoint JWT Token Authentication Bypass Technical Analysis (CVE-2026-55040)
  15. Ra unauthenticated rce in jetbrains teamcity cve 2026 63077
  16. Etr cve 2026 18577 n able n central authentication bypass exploited in the wild
  17. Ra kindarails2shell technical analysis cve 2026 66066

July 2026

  1. Rapid7 Expands UK and Ireland Channel Presence Through Strategic Partnership with Exclusive Networks
  2. Rapid7 at Black Hat USA 2026: See preemptive security in action
  3. Pt metasploit pro 5 1 released
  4. Etr kindarails2shell cve 2026 66066 critical arbitrary file read and possible remote code execution in ruby on rails
  5. Pt metasploit framework 6 5 released
  6. Etr critical vmware vcenter vulnerabilities allow authentication bypass and remote code execution cve 2026 59309 cve 2026 59310
  7. Etr cve 2026 63077 critical unauthenticated remote code execution in jetbrains teamcity
  8. Ra check point smartconsole authentication bypass technical analysis cve 2026 16232
  9. Rapid7 named a Leader in the IDC MarketScape: Worldwide MDR Service for Midmarket 2026 Vendor Assessment
  10. How AI is Rewriting the Zero-Day Playbook for Preemptive Security
  11. The Next Evolution of MDR: Preemptive Defense and Agentic Investigation
  12. Rapid7 and Exclusive Networks expand partnership to modernize security operations and accelerate customer success
  13. Rapid7 Cyber GRC is now available: Turn security action into compliance proof
  14. Rapid7 AI | What Happened Between OpenAI and Hugging Face?
  15. Etr cve 2026 16232 critical check point smartconsole authentication bypass exploited in the wild
  16. What’s New in Rapid7 Products and Services: Q2 2026 in Review
  17. Etr cve 2026 63030 wp2shell a critical remote code execution vulnerability in wordpress core
  18. Pt metasploit wrap up an http to smb relay plus payload improvements
  19. Etr cve 2026 58644 microsoft sharepoint server unauthenticated remote code execution vulnerability exploited in the wild
  20. Inside an Exposed Malware Delivery Lab: OPSEC Failures Behind a WebDAV Phishing Operation
  21. Sunsetting the Public AttackerKB Platform | Rapid7
  22. Etr rapid7 mdr team discovers new sonicwall sma1000 zero days being actively exploited cve 2026 15409 cve 2026 15410
  23. Em patch tuesday july 2026
  24. Rapid7 Labs: Investigating Persistence Mechanisms in AWS
  25. CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED)
  26. Rapid7 and Mindware Partner Across the Middle East
  27. Pt weekly metasploit update exploits for flowiseai csv agent and macos package kit
  28. Pt metasploit wrap up 07 03 2026

June 2026

  1. Pt weekly metasploit update modules for audiobookshelf litellm next js dalfox and more
  2. Pt metasploit wrap up 19 06 2026
  3. Rapid7 Analysis: CVE-2015-1197
  4. Rapid7 Analysis: CVE-2021-36260
  5. Rapid7 Analysis: CVE-2023-27532
  6. Rapid7 Analysis: CVE-2026-20127
  7. Beyond the Score: Using AI to Translate CVEs into Real-World Business Risk
  8. Pt metasploit wrap up 13 06 2026
  9. Pt metasploit wrap up 05 06 2026

May 2026

  1. Pt metasploit wrap up 05 29 2026
  2. Pt metasploit wrap up 05 22 2026
  3. Pt metasploit wrap up 05 15 2026
  4. Rapid7 Drives Partner Impact with Stevie Award-Winning Certifications
  5. Pt metasploit wrap up 05 08 2026
  6. Pt metasploit wrap up 05 01 2026

April 2026

  1. Pt metasploit wrap up 04 25 2026
  2. Pt metasploit wrap up 04 17 2026
  3. Pt metasploit wrap up 04 10 2026
  4. What’s New in Rapid7 Products and Services: Q1 2026 in Review
  5. Pt metasploit wrap up 04 03 2026
  6. New Whitepaper: Stealthy BPFDoor Variants are a Needle That Looks Like Hay

March 2026

  1. Pt metasploit wrap up 03 27 2026
  2. From Vectors to Verdicts: Web App Testing with Vector Command
  3. Pt metasploit wrap up 03 20 2026
  4. Negotiating with the Board: Translating Active Risk into Financial Exposure
  5. Rapid7 Guidance on Observed Microsoft Teams Phishing Campaigns
  6. Pt metasploit wrap up 03 13 2026
  7. Accelerate Attack Surface Discovery with new AI-Powered Connectors
  8. Pt metasploit wrap up 03 06 2026
  9. Rapid7 and Our Global Partners Are Elevating Security Together

February 2026

  1. Pt metasploit wrap up 02 27 2026
  2. Multi-Tenant API Access: Centralize, Scale, and Secure Your Operations
  3. Pt metasploit wrap up 02 20 2026
  4. Pt metasploit wrap up 02 13 2026
  5. Pt metasploit wrap up 02 06 2026
  6. Rapid7's Kelly Hiscoe Recognized Among CRN 2026 Channel Chiefs for Innovation and Impact

January 2026

  1. Pt metasploit wrap up 01 30 2026
  2. Pt metasploit wrap up 01 23 2026
  3. Rapid7 MDR Integrates Microsoft Defender Signals to Create Tangible Security Outcomes
  4. Pt metasploit wrap up 01 16 2026
  5. Pt metasploit wrap up 01 09 2026
  6. Pt metasploit 2025 annual wrap up

2025 165

December 2025

  1. What’s New in Rapid7 Products & Services: H2 2025 in Review
  2. Metasploit wrap up 12 19 2025
  3. Test for React2Shell with Rapid7 AppSec using New Functionality
  4. Pt dynamic easm discovery continuous discovery for a changing attack surface
  5. Pt metasploit wrap up 12 12 2025
  6. Pt metasploit wrap up 12 05 2025

November 2025

  1. Pt metasploit wrap up 11 28 2025
  2. Pt metasploit wrap up 11 21 2025
  3. Pt metasploit wrap up 11 14 2025
  4. Pt metasploit wrap up 11 07 2025

October 2025

  1. Pt metasploit wrap up 10 31 2025
  2. Metasploit wrap up 10 24 2025
  3. Pt metasploit wrap up 10 17 2025
  4. Pt metasploit wrap up 10 09 2025
  5. Pt metasploit wrap up 10 03 2025
  6. Rapid7 Extends Command Platform Capability with Middle East Region Launch

September 2025

  1. Pt metasploit wrap up 09 26 2025
  2. Pt metasploit weekly wrap up 09 19 2025
  3. Pt metasploit wrap up 09 12 25
  4. ANY.RUN and Rapid7 Threat Feed Integration
  5. Microsoft Patch Tuesday - September 2025
  6. Pt metasploit weekly wrap up 09 05 2025
  7. Rapid7 InsightAppSec: Time-based One-Time Passwords, MFA Automation Using Macros

August 2025

  1. Metasploit weekly wrap up 08 28 2025
  2. Metasploit weekly wrap up 08 22 2025
  3. From perimeter to core: Vector Command Advanced expands Rapid7's red team coverage
  4. Metasploit weekly wrap up 08 15 2025
  5. Announcing Nmap 7.95 Upgrade and More Accurate Simple Network Management Protocol (SNMP) Fingerprinting
  6. Metasploit wrap up 08 08 25
  7. Rapid7 Q2 2025 | What’s New in Products & Services
  8. Introducing the metasploit pro ad cs metamodule
  9. What’s New in Exposure Management at Rapid7, Q3 2025
  10. Metasploit Weekly Wrap-Up: 08/01/2025

July 2025

  1. Metasploit wrap up 07 25 2025
  2. Zero Learning Curve, Maximum Speed: AI for Log Search is Here
  3. Less Clicks, More Action: Navigation Upgrade for Rapid7 Customers
  4. Metasploit weekly wrap up 07 18 2025
  5. Metasploit wrap up 07 11 2025
  6. Metasploit wrap up 07 03 2025

June 2025

  1. Metasploit wrap up 06 27 25
  2. Speed scale and immediate action with agentic ai workflows for mdr
  3. Metasploit wrap up 06 20 2025
  4. Metasploit weekly wrap up 06 17 2025
  5. Blacksuit continues social engineering attacks in wake of black bastas internal conflict
  6. Patch tuesday june 2025
  7. 5 things security leaders need to know about agentic ai
  8. Navigating aws migration achieving clarity and confidence 2
  9. Cultivating growth and development at rapid7
  10. Indias cyber leaders prepare for ai driven threats
  11. Rapid7 q1 2025 incident response findings
  12. From ideology to financial gain exploring the convergence from hacktivism to cybercrime
  13. Introducing ai attack coverage in exposure command secure what traditional appsec tools miss

May 2025

  1. Metasploit wrap up 05 30 2025
  2. Seeing is securing how surface command expands mdr visibility and impact
  3. Cve 2025 48045 cve 2025 48046 cve 2025 48047 mici netfax server product vulnerabilities not fixed
  4. Key takeaways from the take command summit 2025 customer panel on future proofing vm programs
  5. Retail under siege what recent cyber attacks tell us about todays threat landscape
  6. Mastering emergent threat response validation
  7. Metasploit wrap up 157
  8. Nsis abuse and srdi shellcode anatomy of the winos 4 0 campaign
  9. What the take command 2025 survey tells us about the state of security
  10. Key takeaways from the take command summit 2025 inside the mind of an attacker
  11. Etr ivanti epmm exploit chain exploited in the wild
  12. Metasploit wrap up 05 16 2025
  13. Etr multiple fortinet products cve 2025 32756 exploited in the wild
  14. Patch tuesday may 2025
  15. Vendor agnostic security the key to smarter risk management
  16. Recognizing excellence rapid7s kelly hiscoe and heather demartini honored as crns 2025 women of the channel
  17. Metasploit wrap up 05 09 2025
  18. Exploring an untethered unified approach to ctem
  19. Multiple vulnerabilities in sonicwall sma 100 series 2025
  20. Key takeaways from the take command summit 2025 from zero to hero building the perfect defense
  21. Metasploit wrap up 114
  22. Ai and resilience take the spotlight in 2025 key trends from gartner r cybersecurity research
  23. Why is ransomware still a thing in 2025

April 2025

  1. Three takeaways from the gartner r report how to grow vulnerability management into exposure management
  2. Deepening the mdr partnership rapid7 now delivers active remediation with velociraptor
  3. Driving down mttr with remediation hub available in rapid7 exposure command
  4. From exposure to assurance unified remediation across the security lifecycle
  5. Insightidr ai alert triage automatically classifies alerts with 99 93 accuracy
  6. Reinforcing resilience with financial assurance breach protection matters now more than ever
  7. Etr active exploitation of sap netweaver visual composer cve 2025 31324
  8. Introducing rapid7s exposure assessment platform buyers guide
  9. Metasploit wrap up 04 25 2025
  10. The new rapid7 mdr for enterprise tailored detection and response for complex environments
  11. From noise to action introducing intelligence hub
  12. Metasploit wrap up 04 18 2025
  13. Following the news mitres common vulnerabilities and exposures cve funding
  14. Take command 2025 a day of insight innovation and impact
  15. Metasploit weekly wrap up 04 11 2025
  16. Password spray attacks taking advantage of lax mfa
  17. 2025 ransomware business as usual business is booming
  18. Patch tuesday april 2025
  19. Dont miss out what you need to know before take command 2025
  20. Metasploit wrap up 04 04 2025
  21. Pentales red team vs n day and how we won
  22. Etr ivanti connect secure cve 2025 22457 exploited in the wild
  23. A rebirth of a cursed existence the babuk locker 2 0
  24. Preview the action two new sessions available before take command 2025
  25. A new approach to managing vulnerabilities is required work smarter not harder with rapid7 remediation hub
  26. Whats new in rapid7 products services q1 2025 in review

March 2025

  1. Seeing is securing mdr value at a glance with the detection response dashboard
  2. Metasploit wrap up 03 28 2025
  3. Overcoming the challenges of vulnerability remediation
  4. Unpacking a post compromise breach simulation with vector command
  5. Inside the mind of the attacker a conversation with raj samani
  6. Rapid7 earns 5 star rating in the 2025 crn r partner program guide
  7. Etr multiple vulnerabilities in ingress nginx controller for kubernetes
  8. Etr notable vulnerabilities in next js cve 2025 29927
  9. Metasploit wrap up 03 21 2025
  10. Secure your attack surface key findings from idcs 2024 spotlight report
  11. Etr apache tomcat cve 2025 24813 what you need to know
  12. Etr critical veeam backup and replication cve 2025 23120
  13. Fake bianlian ransomware letters in circulation
  14. Fresh faces join the take command 2025 lineup
  15. Metasploit weekly wrap up 03 14 25
  16. Unlocking mssp success why ctem is critical
  17. Explaining external network assessment with vector command
  18. Helping us help you practical applications of ai in the soc
  19. Patch tuesday march 2025
  20. Seeing the whole picture a better way to manage your attack surface
  21. Metasploit wrap up 03 06 2025
  22. Inside the take command summit 2025 agenda whats in store for this years event
  23. Building a high performance team in india meet swami nathan
  24. Etr multiple zero day vulnerabilities in broadcom vmware esxi and other products

February 2025

  1. Metasploit weekly wrap up 02 28 2025
  2. Why mdr in 2025 is about scaling with purpose
  3. Mdr siem why full access to your security logs is non negotiable
  4. Command platform innovations eliminate data blind spots through complete visibility and context driven risk prioritization
  5. Uncovering and protecting sensitive data across cloud environments with exposure command
  6. Under the hoodie the pen test diaries
  7. Metasploit weekly wrap up 46
  8. Rapid7 fills gaps in the cve assessment process with ai generated vulnerability scoring in exposure command
  9. Take command rapid7s 2025 cybersecurity summit first look at our speaker lineup
  10. Metasploit weekly wrap up 45
  11. Xerox versalink c7025 multifunction printer pass back attack vulnerabilities fixed
  12. Cve 2025 1094 postgresql psql sql injection fixed
  13. How to protect your organizations bluesky account from security threats
  14. Microsoft patch tuesday
  15. Interning at rapid7 prague meet mko
  16. Metasploit weekly wrap up 02 07 2025
  17. Vector command opportunistic phishing blog
  18. 4 reasons why msps and mssps need attack surface management
  19. Take command rapid7s 2025 cybersecurity summit
  20. Introducing the exposure management webinar series commanding your attack surface
  21. Excellence in leadership crn recognizes alex page among its 2025 channel chiefs

January 2025

  1. Metasploit weekly wrap up 01 31 25
  2. Paying it forward giving and receiving mentorship in tech
  3. The 2024 ransomware landscape looking back on another painful year
  4. Metasploit weekly wrap up 01 24 2025
  5. The vulnerability vortex escaping the whirlpool of ineffective security
  6. Key takeaways mastering risk prioritization with rapid7 surface command
  7. Metasploit wrap up 01 17 2025
  8. Etr fortinet firewalls hit with new zero day attack older data leak
  9. Perfect fit or business threat how to mitigate the risk of rogue employees
  10. Patch tuesday january 2025
  11. Metasploit wrap up 01 10 2025
  12. Securing success stories from the soc webinar series
  13. Unlocking the power of ai in cybersecurity key takeaways from our latest webinar
  14. Built in honors rapid7 with 2025 best places to work award
  15. Etr cve 2025 0282 ivanti connect secure zero day exploited in the wild
  16. New research enhancing botnet detection with ai using llms and similarity search
  17. Rapid7 recognized with top score of 100 in 2025 corporate equality index
  18. Out with the old in with the new securely disposing of smart devices
  19. Metasploit 2024 annual wrap up

2024 217

December 2024

  1. Metasploit weekly wrap up 12 20 2024
  2. Whats new in rapid7 products services q4 2024 in review
  3. Take command of your career practicing self advocacy as a woman in tech
  4. 2024 threat landscape statistics ransomware activity vulnerability exploits and attack trends
  5. Metasploit weekly wrap up 12 13 2024
  6. Navigating choppy waters top security predictions from rapid7s 2025 webinar
  7. Etr modular java backdoor dropped in cleo exploitation campaign
  8. Etr widespread exploitation of cleo file transfer software cve 2024 50623
  9. Patch tuesday december 2024
  10. Metasploit weekly wrap up 44
  11. Rapid7 extends cloud security capabilities with updates to exposure command
  12. Black basta ransomware campaign drops zbot darkgate and custom malware
  13. Expanded soc coverage into aws environments with rapid7 mxdr
  14. Lorex 2k indoor wi fi security camera multiple vulnerabilities fixed
  15. Why cybercriminals are not necessarily embracing ai

November 2024

  1. Metasploit weekly wrapup 11 29 2024
  2. New cleversoar installer targets chinese and vietnamese users
  3. Metasploit weekly wrap up 11 22 2024
  4. A bag of rats venomrat vs asyncrat
  5. Multiple vulnerabilities in wowza streaming engine fixed
  6. Rapid7 extends aws support to include coverage for newly launched resource control policies rcps
  7. Accelerate mean time to exposure remediation across hybrid environments with remediation hub
  8. Rapid7 recognized for excellence in workplace health and wellbeing at the belfast telegraph it awards
  9. Unlock 24 7 soc coverage rapid7 mxdr now supports with microsoft security products
  10. Etr zero day exploitation targeting palo alto networks firewall management interfaces
  11. Metasploit weekly wrap up 43
  12. New idr log search enhancements accelerate streamline and simplify investigations
  13. Lodarat established malware new victim patterns
  14. Patch tuesday november 2024
  15. Metasploit wrap up 11 08 2024
  16. Mind the gap how surface command tackles asset visibility in attack surface management
  17. Cathal oneill taking command of your career in tech
  18. 20 20 cybersecurity lessons learned in 2024 and strategies for a stronger 2025
  19. Finding the lnk techniques and methodology for advanced analysis with velociraptor
  20. Metasploit weekly wrap up 11 01 2024

October 2024

  1. Investigating a sharepoint compromise ir tales from the field
  2. The importance of asset context in attack surface management
  3. Building a custom risk prioritization and risk scoring methodology with surface command
  4. Metasploit weekly wrap up 10 25 2024
  5. Etr fortinet fortimanager cve 2024 47575 exploited in zero day attacks
  6. 7 rapid questions on our belfast placement programme orla magee and paddy mcdermott
  7. Metasploit weekly wrap up 10 18 2024
  8. Understanding your attack surface different approaches to asset discovery
  9. Root access for data control a def con iot village story
  10. Test driving a new benefit programme in belfast
  11. Patch tuesday october 2024
  12. Metasploit weekly wrap up 10 04 2024
  13. The main components of an attack surface management asm strategy
  14. Modernizing your vm program with rapid7 exposure command a path to effective continuous threat exposure management
  15. Ransomware groups demystified cybervolk ransomware
  16. Whats new in rapid7 products services q3 2024 in review

September 2024

  1. Proactive visibility is foundational to strong cybersecurity
  2. Metasploit weekly wrap up 09 27 2024
  3. Etr multiple vulnerabilities in common unix printing system cups
  4. Proactively securing cloud workloads in the ci cd pipeline with rapid7 and azure devops
  5. Rapid7 recognized in forresters 2024 attack surface management asm wave report
  6. Three recommendations for creating a risk based detection and response program
  7. Expanding the security horizon introducing rapid7 mdr for the extended ecosystem
  8. Metasploit weekly wrap up 09 20 2024
  9. Etr high risk vulnerabilities in common enterprise technologies
  10. Help i cant see a primer for attack surface management blog series
  11. Rapid7 introduces vector command a new managed service for continuous red teaming
  12. Metasploit weekly wrap up 09 13 2024
  13. The growing importance of exposure management our key insights from gartner r hype cycle for security operations 2024
  14. Ransomware groups demystified lynx ransomware
  15. Patch tuesday september 2024
  16. Rapid7 named a leader in idc marketscape worldwide siem for smb
  17. Etr cve 2024 40766 critical improper access control vulnerability affecting sonicwall devices
  18. Etr multiple vulnerabilities in veeam backup and replication
  19. Our 4 essential strategy takeaways from the gartner r 2024 report how to prepare for ransomware attacks
  20. Cve 2024 45195 apache ofbiz unauthenticated remote code execution fixed

August 2024

  1. Metasploit weekly wrap up 08 30 2024
  2. Command with confidence insights from andrew bustamante
  3. Assessing container images across private registries with insightcloudsec
  4. Key takeaways from the take command summit navigating new sec cybersecurity disclosure rules
  5. Metasploit weekly wrap up 08 23 2024
  6. Preparing for unknown risks how to better prepare for risks you cant see yet
  7. Selling ransomware breaches 4 trends spotted on the ramp forum
  8. 5 key insights from the gartner r market guide for cloud native application protection platforms cnapp
  9. Key takeaways from the take command summit enhancing cybersecurity culture
  10. Metasploit weekly wrap up 08 16 2014
  11. Brandon adkins career journey taking chances and tackling new challenges
  12. Black hat 2024 key takeaways and industry trends
  13. Patch tuesday august 2024
  14. Ongoing social engineering campaign refreshes payloads
  15. Key takeaways from the take command summit unlocking security success
  16. Metasploit weekly wrap up 08 09 2024
  17. Managing the risks of shadow ai in modern enterprises
  18. Keys to the kingdom gaining access to the physical facility through internal access
  19. Details matter pentesting a single device to guarantee security
  20. Rapid7s ransomware radar report shows threat actors are evolving fast
  21. Introducing the rapid7 command platform
  22. Rapid7 introduces exposure command to eliminate the security visibility gap
  23. Metasploit weekly wrap up 08 02 2024
  24. New cloud risk dashboard identifying toxic combinations to drive faster remediation

July 2024

  1. New research the proliferation of cellular in iot
  2. Vmware esxi cve 2024 37085 targeted in ransomware campaigns
  3. Key takeaways from the take command summit building resilient cyber defenses through ai
  4. Cve 2024 6922 automation anywhere automation 360 server side request forgery
  5. Key takeaways from the take command summit command your cloud
  6. Metasploit weekly wrap up 41
  7. Buying stuff for free from shopping websites
  8. Malware campaign lures users with fake w2 form
  9. Metasploit weekly wrap up 7 19 2024
  10. Unveiling key insights from the 2024 take command summit
  11. Defending against apts a learning exercise with kimsuky
  12. Metasploit weekly wrap up 07 12 2024
  13. Whats new in rapid7 products services q2 2024 in review
  14. Takeaways from the take command summit unlocking roi in security
  15. Patch tuesday july 2024
  16. Rapid7 completes irap protected assessment for insight platform solutions
  17. Metasploit wrapup 75

June 2024

  1. Metasploit weekly wrap up 06 28 2024
  2. Supply chain compromise leads to trojanized installers for notezilla recentx copywhiz
  3. Takeaways from the take command summit unprecedented threat landscape
  4. Etr authentication bypasses in moveit transfer and moveit gateway
  5. From top dogs to unified pack 2
  6. Takeaways from the take command summit understanding modern cyber attacks
  7. Metasploit weekly wrap up 06 21 2024
  8. Helpful tools to get started in iot assessments
  9. Malvertising campaign leads to execution of oyster backdoor
  10. Metasploit weekly wrap up 06 14 2024
  11. Rapid7 infuses generative ai into the insightplatform to supercharge secops and augment mdr services
  12. Enhancing velociraptor with the cado security platform
  13. Etr cve 2024 28995 trivially exploitable information disclosure vulnerability in solarwinds serv u
  14. Patch tuesday june 2024
  15. Metasploit weekly wrap up 06 07 2024
  16. Securing ai development in the cloud navigating the risks and opportunities
  17. The dreaded network pivot an attack intelligence story

May 2024

  1. Metasploit weekly wrap up 05 31 2024
  2. New insight agent support for arm based windows in insightvm
  3. Celebrating excellence joanne guarglia and kelly hiscoe recognized as crns 2024 women of the channel
  4. Etr cve 2024 24919 check point security gateway information disclosure
  5. Cve 2024 4978 backdoored justice av solutions viewer software used in apparent supply chain attack
  6. Metasploit weekly wrap up 05 23 2024
  7. Rapid7 releases the 2024 attack intelligence report
  8. Metasploit wrap up 05 17 2024
  9. See a sneak peak of tuesdays take command summit
  10. Ai trust risk and security management why tackle them now
  11. 5 key mdr differentiators to look for to build stronger security resilience
  12. Patch tuesday may 2024
  13. Ongoing malvertising campaign leads to ransomware
  14. Rapid7 recognized in the 2024 gartner r magic quadrant for siem
  15. Metasploit wrap up 05 10 2024
  16. Ongoing social engineering campaign linked to black basta ransomware operators
  17. Layered defense to stop attacks before they begin
  18. Take command summit a message from rapid7 chairman and ceo corey thomas
  19. Metasploit weekly wrap up 05 03 24
  20. The take command summit a stacked agenda and killer guest speakers coming your way may 21
  21. The business of cybersecurity ownership

April 2024

  1. Velociraptor 0 7 2 release digging deeper than ever with ewf support dynamic dns and more
  2. Metasploit weekly wrap up 04 26 24
  3. Etr unauthenticated crushftp zero day enables complete server compromise
  4. Usf college of engineering presents rapid7 with 2024 corporate impact award
  5. Take command summit take breaches from inevitable to preventable on may 21
  6. Metasploit weekly wrap up 04 19 24
  7. Enforce and report on pci dss v4 compliance with rapid7
  8. Rapid7 insight platform achieves level 2 tx ramp authorization
  9. Etr cve 2024 3400 critical command injection vulnerability in palo alto networks firewalls 2
  10. Metasploit weekly wrap up 04 12 24
  11. Stories from the soc part 2 msix installer utilizes telegram bot to execute idat loader
  12. Patch tuesday april 2024
  13. Metasploit weekly wrap up 04 05 2024
  14. Whats new in rapid7 products services q1 2024 in review
  15. Cve 2024 0394 rapid7 minerva armor privilege escalation fixed
  16. Etr backdoored xz utils cve 2024 3094

March 2024

  1. Metasploit weekly wrap up 03 29 2024
  2. Stories from the soc part 1 idat loader to bruteratel
  3. Metasploit framework 6 4 released
  4. Metasploit weekly wrap up 03 22 2024
  5. Why the external attack surface matters an analysis into apac related threat activities
  6. The updated apt playbook tales from the kimsuky threat actor group
  7. Rapid7 offers continued vulnerability coverage in the face of nvd delays
  8. Metasploit wrap up 03 15 24
  9. Patch tuesday march 2024
  10. Metasploit wrap up 03 08 2024
  11. Securing the next level automated cloud defense in game development with insightcloudsec
  12. 7 rapid questions with 77 ray bourque
  13. Etr cve 2024 27198 and cve 2024 27199 jetbrains teamcity multiple authentication bypass vulnerabilities fixed
  14. Lessons from video game companies automation unleashes robust monitoring observability
  15. Metasploit weekly wrap up 03 01 2024

February 2024

  1. How to hunt for uefi malware using velociraptor
  2. Metasploit weekly wrap up 02 23 2024
  3. Etr high risk vulnerabilities in connectwise screenconnect
  4. Explanation of new authenticated scanning pci dss requirement 11 3 1 2 in pci dss v4 0 and how insightvm can help meet the requirement
  5. Metasploit weekly wrap up 02 16 2024
  6. Rce to sliver ir tales from the field
  7. Paving a path to systems administration naeem jones journey with rapid7
  8. Cve 2023 47218 qnap qts and quts hero unauthenticated command injection fixed
  9. Patch tuesday february 2024
  10. Etr critical fortinet fortios cve 2024 21762 exploited
  11. Metasploit weekly wrap up 02 09 2024
  12. 5 insights from the latest cybersecurity trends research
  13. Celebrating excellence alex page recognized as a crn 2024 channel chief
  14. Four key benefits of rapid7s new managed digital risk protection service
  15. Exploring the not so secret code of blackhunt ransomware 2
  16. Metasploit weekly wrap up 02 02 2024
  17. Rapid7 in prague pete rubio shares insights and excitement for the new office

January 2024

  1. Insightappsec improving scan speed and performance
  2. Metasploit weekly wrap up 01 26 24
  3. Building the best soc takes strategic thinking
  4. Etr cve 2024 0204 critical authentication bypass in fortra goanywhere mft
  5. Etr critical cves in outdated versions of atlassian confluence and vmware vcenter server
  6. Metasploit weekly wrap up 01 19 24
  7. How cisos roles and security operations will change in 2024
  8. Privacy security and connected devices key takeaways from ces 2024
  9. Metasploit weekly
  10. Whispers of atlantida safeguarding your digital treasure
  11. Application security posture management
  12. 2023 ransomware stats a look back to plan ahead
  13. Metasploit weekly wrap up 01 12 24
  14. 4 questions for cisos to reduce threat exposure risk
  15. Etr zero day exploitation of ivanti connect secure and policy secure gateways
  16. Patch tuesday january 2024
  17. Metasploit weekly wrap up 40
  18. Rapid7s data centric approach to ai in belfast
  19. Genie aladdin connect retrofit garage door opener multiple vulnerabilities

2023 200

December 2023

  1. Metasploit 2023 wrap up
  2. Velociraptor 0 7 1 release sigma support etw multiplexing local encrypted storage and new vql capabilities highlight the last release of 2023
  3. Mastering industrial cybersecurity the significance of combining vulnerability management with detection and response
  4. Metasploit weekly wrap up 39
  5. Securely build ai ml applications in the cloud with rapid7 insightcloudsec
  6. Whats new in rapid7 products services 2023 year in review
  7. Expanded coverage and aws compliance pack updates in insightcloudsec coming out of aws re invent 2023
  8. Expanded coverage and new attack path visualizations help security teams prioritize cloud risk and understand blast radius
  9. Metasploit weekly wrap up 38
  10. Nist sp 800 53 rev 5 updates what you need to know about the most recent patch release 5 1 1
  11. Patch tuesday december 2023
  12. Living our values and leveraging diverse skill sets how jonathan atwood built a successful career as a customer advisor at rapid7
  13. Metasploit wrap up 12 8 2023
  14. A trusted voice in a crowded market meet joanne guariglia senior channel account manager at rapid7
  15. Method to an old consultants madness with site design
  16. Etr cve 2023 49103 critical information disclosure in owncloud graph api
  17. Metasploit weekly wrap up 37

November 2023

  1. Attackers are working around the clock luckily so are we
  2. Rapid7 takes next step in ai innovation with new ai powered threat detections
  3. Updates to layered context enable teams to quickly understand which risk signals are most pressing
  4. Building our team in prague meet martin votruba
  5. Rapid7 introduces ai driven cloud anomaly detection
  6. Manage enterprise risk at scale with a unified holistic approach
  7. Patch tuesday november 2023
  8. Cve 2023 5950 rapid7 velociraptor reflected xss
  9. Metasploit weekly wrap up 35
  10. Artificial intelligence and machine learning can be used to stop dast attacks before they start
  11. Etr cve 2023 47246 sysaid zero day vulnerability exploited by lace tempest
  12. Ghostlocker a work in progress raas
  13. Setup of discovery connection azure
  14. Etr rapid7 observed exploitation of atlassian confluence cve 2023 22518
  15. Metasploit weekly wrap up 34
  16. Etr suspected exploitation of apache activemq cve 2023 46604

October 2023

  1. Is that smart home technology secure heres how you can find out
  2. Etr cve 2023 4966 exploitation of citrix netscaler information disclosure vulnerability
  3. Metasploit weekly wrap up 32
  4. Etr cve 2023 20198 active exploitation of cisco ios xe zero day vulnerability
  5. Multiple vulnerabilities in south river technologies titan mft and titan sftp fixed
  6. Metasploit weekly wrap up 31
  7. The risks of exposing dicom data to the internet
  8. Patch tuesday october 2023
  9. Metasploit weekly wrap up 30
  10. Little crumbs can lead to giants
  11. Etr cve 2023 22515 zero day privilege escalation in confluence server and data center
  12. Proactively prevent breaches with expanded endpoint protection in rapid7 mdr

September 2023

  1. Etr critical vulnerabilities in ws ftp server
  2. Metasploit weekly wrap up 29
  3. Unlock broader detections forensics with velociraptor in rapid7 xdr
  4. Whats new in insightvm and nexpose q3 2023 in review
  5. Introducing active risk
  6. Metasploit weekly wrap up 28
  7. Rapid7 delivers visibility across all 19 steps of attack in 2023 mitre engenuity
  8. Rapid7 doubles down on a platform approach for vulnerability risk management
  9. Metasploit weekly wrap up 27
  10. Patch tuesday september 2023
  11. Metasploit weekly wrap up 26
  12. Cve 2023 4528 java deserialization vulnerability in jscape mft fixed
  13. Metasploit weekly wrap up 25

August 2023

  1. Etr exploitation of juniper networks srx series and ex series devices
  2. Fake update utilizes new idat loader to execute stealc and lumma infostealers
  3. Pentales what its like on the red team
  4. Velociraptor 0 7 0 release dig deeper with enhanced client search server improvements and expanded vql library
  5. Under siege rapid7 observed exploitation of cisco asa ssl vpns
  6. Metasploit weekly wrap up 24
  7. 3 security vendor consolidation myths
  8. Ransomware as a service cheat sheet
  9. Rapid7 takes 2023 sc awards for vulnerability management and threat detection
  10. Metasploit weekly wrap up 23
  11. Join us for velocon 2023 digging deeper together
  12. Rapid7s mid year threat review
  13. Whats new in cvss v4
  14. Metasploit weekly wrapup 8
  15. A message from rapid7 ceo corey thomas
  16. Patch tuesday august 2023
  17. Metasploit weekly wrap up 22
  18. A badge a tag and a bunch of unattended chemicals why physical social engineering engagements are an important part of security
  19. Cve 2023 35082 mobileiron core unauthenticated api access vulnerability
  20. Security implications improper deacquisition medical infusion pumps
  21. How to present secops metrics the right way
  22. Insightappsec advanced authentication settings token replacement
  23. New insightcloudsec compliance pack for cis aws benchmark 2 0 0

July 2023

  1. Metasploit weekly wrap up 21
  2. Etr cve 2023 35078 critical api access vulnerability ivanti in endpoint manager mobile
  3. Metasploit weekly wrap up 20
  4. Pentales testing security health for a healthcare company
  5. Cve 2023 38205 adobe coldfusion access control bypass fixed
  6. Etr critical zero day vulnerability in citrix netscaler adc and netscaler gateway
  7. Managing risk across hybrid environments with executive risk view
  8. Etr active exploitation of multiple adobe coldfusion vulnerabilities
  9. Metasploit weekly wrap up 19
  10. Etr sonicwall recommends urgent patching for gms and analytics cves
  11. Old blackmoon trojan new monetization approach
  12. Pentales old vulns new tricks
  13. Cve 2023 29298 adobe coldfusion access control bypass
  14. Patch tuesday july 2023
  15. Showcasing secops metrics that matter
  16. User enumeration is not a vulnerability i beg to differ

June 2023

  1. Four signs you need to consolidate your tech stack
  2. Whats new in insightvm and nexpose q2 2023 in review
  3. Rapid7 solutions for partners
  4. The japanese threat landscape a report on cyber threats in the third largest economy on earth
  5. Standardizing saas data to drive greater cloud security efficacy
  6. Uncover and remediate toxic combinations with attack path analysis
  7. Multiple vulnerabilities in fortra globalscape eft administration server fixed
  8. Cyber asset attack surface management 101
  9. Metasploit weekly wrap up 15
  10. Etr cve 2023 34362 moveit vulnerability timeline of events
  11. Patch tuesday june 2023
  12. Etr cve 2023 27997 critical fortinet fortigate remote code execution vulnerability
  13. Metasploit weekly wrap up 14
  14. Detect and prioritize identity related cloud risk with insightcloudsec
  15. Etr cve 2023 2868 total compromise of physical barracuda esg appliances
  16. Owasp top 10 api security risks 2023
  17. Metasploit weekly wrap up 13
  18. Velociraptor 0 6 9 release digging even deeper with smb support azure storage and lockdown server mode
  19. This is ceti alpha five
  20. Rapid7 observed exploitation of critical moveit transfer vulnerability
  21. Rapid7 sales director devin poulter on building a career as an account executive

May 2023

  1. Etr widespread exploitation of zyxel network devices
  2. Fetch payloads a shorter path from command injection to metasploit session
  3. Casting a light on shadow it in cloud environments
  4. Rapid7 recognized as a strong performer in the forrester wavetm for mdr q2 2023
  5. Etr cve 2023 27350 ongoing exploitation of papercut remote code execution vulnerability
  6. The velociraptor 2023 annual community survey
  7. Patch tuesday may 2023
  8. Metasploit weekly wrap up 9
  9. Cloud security strategies for manufacturing
  10. Three takeaways from the gartner r market guide for managed detection and response services

April 2023

  1. Metasploit weekly wrap up 8
  2. New insightcloudsec compliance pack implementing and enforcing iso 27001 2022
  3. Using rapid7 insight agent and insightvm scan assistant in tandem
  4. Starting a career in tech learn how rapid7s emerging talent programmes foster long term success
  5. Metasploit weekly wrap up 7
  6. Automating qakbot detection at scale with
  7. Metasploit weekly wrap up 6
  8. 7 rapid questions lindsey searle
  9. Patch tuesday april 2023
  10. Rapid7 podcast explores hybrid first workplace learnings
  11. Raptor technologies volunteer management client side security controls fixed
  12. Using insightvm remediation projects to ensure accountability

March 2023

  1. Metasploit weekly wrap up 198
  2. Whats new in insightvm and nexpose q1 2023 in review
  3. Backdoored 3cxdesktopapp installer used in active threat campaign
  4. Rapid7 announces partner of the year awards 2023 winners
  5. Velociraptor version 0 6 8 available now
  6. Multiple vulnerabilities in rocket software unirpc server fixed
  7. Whats new in insightidr q1 2023 in review
  8. Etr active exploitation of ibm aspera faspex cve 2022 47986
  9. Metasploit weekly wrap up 197
  10. Center for information security cis unveils azure foundations benchmark v2 0 0
  11. Reduce risk and regain control with cloud risk complete
  12. Celebrating womens history month at rapid7
  13. Cve 2023 0391 mgt commerce cloudpanel shared certificate vulnerability and weak installation procedures
  14. Etr rapid7 observed exploitation of adobe coldfusion
  15. Metasploit weekly wrap up 196 2
  16. Mitre attack mitigations thwarting cloud threats with preventative policies and controls
  17. Build security muscle memory with tabletop exercises
  18. Rapid7 threat command delivered 311 roi 2023 forrester consulting total economic impact study
  19. Three steps for ramping up to fully automated remediation
  20. Cloud security strategies for healthcare
  21. Microsoft defender for cloud management port exposure confusion
  22. Patch tuesday march 2023
  23. Vulnerability management vs vulnerability assessment
  24. Etr active exploitation of zk framework cve 2022 36537

February 2023

  1. A shifting attack landscape rapid7s 2022 vulnerability intelligence report
  2. The next generation of managed detection and response is here
  3. Rapid7 ceo corey e thomas appointed to national security telecommunications advisory committee
  4. Ciem is required for cloud security and iam providers to compete gartner r report
  5. Patch tuesday february 2023
  6. A deep dive into reversing codesys
  7. Metasploit weekly wrap up 192
  8. Evasion techniques uncovered an analysis of apt methods
  9. Nearly 19 000 esxi servers still vulnerable to cve 2021 21974
  10. Etr cve 2022 21587 rapid7 observed exploitation of oracle e business suite vulnerability
  11. Multiple dms xss cve 2022 47412 through cve 20222 47419
  12. Rapid7 recognized on bloomberg gender equality index continues commitments to support dei
  13. Cve 2023 22501 critical broken authentication flaw in jira service management products
  14. Ransomware campaign compromising vmware esxi servers
  15. Exploitation of goanywhere mft zero day vulnerability
  16. Metasploit weekly wrap up 191
  17. Troubleshooting insightappsec authentication issues
  18. Cve 2023 22374 f5 big ip format string vulnerability

January 2023

  1. A customer success managers journey to cybersecurity
  2. Rapid7 observes use of microsoft onenote to spread redline infostealer malware
  3. Metasploit framework 6 3 released
  4. Metasploit weekly wrap up 190
  5. The high cost of human error in ot systems
  6. 3 ways to apply a risk based approach to threat detection investigation and response gartner r report
  7. Rapid7 added to carahsoft gsa schedule contract
  8. Rapid7 now available through carahsofts naspo valuepoint
  9. Metasploit weekly wrap up 189
  10. Etr cve 2022 47966 rapid7 observed exploitation of critical manageengine vulnerability
  11. Etr exploitation of control web panel cve 2022 44877
  12. Trading convenience for credentials
  13. Dated vulnerable insecure tech is all over the news hooray
  14. Recog release v3 0 3 2022 10 20
  15. Increasing the sting of hive ransomware
  16. Patch tuesday january 2023
  17. Year in review vulnerability management
  18. Rapid7 announces global days off to support employees in 2023

2022 265

December 2022

  1. 2022 metasploit wrap up
  2. Refreshing rapid7s coordinated vulnerability disclosure policy
  3. The 2022 naughty and nice list
  4. Cloud security and compliance best practices highlights from the csa cloud controls matrix
  5. Cve 2022 41080 cve 2022 41082 rapid7 observed exploitation of owassrf in exchange for rce
  6. Cengage lti session management leakage
  7. Icymi 10 cybersecurity acronyms you should know in 2023
  8. Cloud audit compliance automation
  9. Cve 2022 27518 critical fix released for exploited citrix adc gateway vulnerability
  10. Patch tuesday december 2022
  11. Tis the season to be wary holiday shopping scams to watch for
  12. Cve 2022 42475 unauthenticated remote code execution vulnerability in fortios exploitation reported
  13. Rapid7 recognized as a top place to work in for 11th consecutive year
  14. Aws graviton processor support on insight agent
  15. Metasploit wrap up 156
  16. About anomalous data transfer detection in insightidr
  17. Cve 2022 4261 rapid7 nexpose update validation issue fixed
  18. Iso 27001 certification what it is and why it matters
  19. Leaked android platform certificates create risks for users
  20. Metasploit weekly wrap up 186
  21. Velociraptor version 0 6 7 better offline collection encryption and an improved ntfs parser dig deeper than ever

November 2022

  1. Rapid7 integration for aws verified access
  2. Insightidr launches integration with new aws security data lake service
  3. Unifying threat findings to elevate your runtime cloud security
  4. Reducing risk with agentless cloud vulnerability management
  5. Aligning to aws foundational security best practices with insightcloudsec
  6. Metasploit weekly wrap up 184
  7. Rapid7 and hashicorp partner to secure terraform based cloud infrastructure deployments
  8. Cve 2022 41622 and cve 2022 41800 fixed f5 big ip and icontrol rest vulnerabilities and exposures
  9. Rapid7 takes home 2 awards and a highly commended recognition at the 2022 belfast telegraph it awards
  10. Cve 2022 27510 critical citrix adc and gateway remote authentication bypass vulnerability
  11. How to develop a soar workflow to automate a critical daily task
  12. Graphql security the next evolution in api protection
  13. Metasploit weekly wrap up 183
  14. Rapid7s impact from openssl buffer overflow vulnerabilities cve 2022 3786 cve 2022 3602
  15. Culture fitness
  16. New mitre engenuity att ck r evaluation rapid7 mdr excels
  17. New research optimizing dast vulnerability triage with deep learning
  18. Hands on iot hacking rapid7 at def con 30 iot village pt 4
  19. Patch tuesday november 2022 2
  20. Metasploit weekly wrap up 182
  21. Rapid7s impact from apache commons text vulnerability cve 2022 42889
  22. Cve 2022 3786 and cve 2022 3602 two high severity buffer overflows in openssl fixed
  23. Hands on iot hacking rapid7 at def con 30 iot village pt 3

October 2022

  1. Metasploit weekly wrap up 180
  2. Cve 2021 39144 vmware cloud foundation unauthenticated remote code execution
  3. Hands on iot hacking rapid7 at def con 30 iot village pt 2
  4. Metasploit weekly wrap up 181
  5. New research were still terrible at passwords making it easy for attackers
  6. Flexlm and citrix adm denial of service vulnerability
  7. Hands on iot hacking rapid7 at def con 30 iot village part 1
  8. Cve 2022 42889 keep calm and stop saying 4shell
  9. A siem with a pen testers eye how offensive security helps shape insightidr
  10. Cloud iam done right how lpa reduces cloud risk
  11. Metasploit wrap up 155
  12. Rapid7 recognized in the 2022 gartner magic quadrant for siem
  13. Patch tuesday october 2022
  14. Cve 2022 40684 remote authentication bypass vulnerability in fortinet firewalls web proxies
  15. Metasploit weekly wrap up 179
  16. Exploitation of unpatched zero day remote code execution vulnerability in zimbra collaboration suite cve 2022 41352
  17. Velociraptor version 0 6 6 multi tenant mode and more let you dig deeper at scale like never before

September 2022

  1. Metasploit weekly wrap up 178
  2. Suspected post authentication zero day vulnerabilities in microsoft exchange server
  3. Whats new in insightvm and nexpose q3 2022 in review
  4. How to deploy a siem that actually works
  5. Metasploit weekly wrap up 177
  6. One year after intsights acquisition threat intels value is clear
  7. How to accelerate your soar program to full speed in less than a year
  8. Prioritizing xdr in 2023 stronger detection and response with less complexity
  9. Cve 2022 36804 easily exploitable vulnerability in atlassian bitbucket server and data center
  10. Metasploit weekly wrap up 176
  11. Grey time the hidden cost of incident response
  12. Patch tuesday september 2022
  13. Insightvm best practices to improve your console
  14. Integrating cloud security with devops and ci cd tools
  15. Metasploit weekly wrap up 175
  16. Baxter sigma spectrum infusion pumps multiple vulnerabilities fixed
  17. Velocon 2022 digging deeper together
  18. 3 ways to improve data protection in the cloud
  19. 5 steps for dealing with unknown environments in insightvm
  20. 5 things rapid7 looks for in a bdr and how we spot them
  21. Architecting for extortion acting on the ists blueprint for ransomware defense
  22. 25 years of nmap happy scan iversary

August 2022

  1. Rapid7 security compliance insightidr
  2. Incident reporting regulations summary and chart
  3. Metasploit wrap up 173
  4. Cybersecurity analysts job stress is bad but boredom is kryptonite
  5. Avoiding smash and grab under the secs proposed cyber rule
  6. Metasploit wrap up 172
  7. Pushing open source security forward insights from black hat 2022
  8. 360 degree xdr and attack surface coverage with rapid7
  9. Active exploitation of multiple vulnerabilities in zimbra collaboration suite
  10. Are your apps exposed know faster with application discovery in insightappsec
  11. 3 mistakes companies make in their detection and response programs
  12. Metasploit weekly wrap up 171
  13. Ocsf working together to standardize data
  14. Patch tuesday august 2022
  15. No damsels in distress how media and entertainment companies can secure data and content
  16. Building cybersecurity kpis for business leaders and stakeholders
  17. Cve 2022 31660 and cve 2022 31661 fixed vmware workspace one access identity manager and vrealize automation lpe
  18. Qnap poisoned xml command injection silently patched
  19. The future of the soc is xdr
  20. Primary arms pii disclosure via idor
  21. Shift left secure your innovation pipeline

July 2022

  1. Metasploit weekly wrap up 169
  2. Video an inside look at aws re inforce 2022 from the rapid7 team
  3. Whats new in insightvm and nexpose q2 2022 in review
  4. 5 soar myths debunked
  5. Active exploitation of atlassians questions for confluence app cve 2022 26138
  6. To maze and beyond how the ransomware double extortion space has evolved
  7. Cve 2022 35629 35632 velociraptor multiple vulnerabilities fixed
  8. Iso 27002 emphasizes need for threat intelligence
  9. What were looking forward to at aws re inforce
  10. Cloud threat detection to agent or not to agent
  11. Simplify siem optimization with insightidr
  12. 4 key statistics to build a business case for an mdr partner
  13. Deploying a soar tool doesnt have to be hard ive done it twice
  14. 4 strategies for achieving greater visibility in the cloud
  15. Cve 2022 30526 fixed zyxel firewall local privilege escalation
  16. Deploy tcell more easily with the new aws ami agent
  17. Metasploit weekly wrap up 166
  18. Insightvm release update lets focus on remediation for just a minute
  19. Creating an exceptional workplace building and expansion in a post covid world
  20. 3 key challenges for cloud identity and access management
  21. Patch tuesday july 2022
  22. Rapid7 mdr reduced breaches by 90 via greater efficiency to detect investigate respond to and remediate breaches
  23. How to build and enable a cyber target operating model
  24. Metasploit weekly wrap up 165
  25. Exploitation of mitel mivoice connect sa cve 2022 29499
  26. Rapid7 belfast recognized for company connection during covid 19 pandemic

June 2022

  1. Application security in 2022 where are we now
  2. Cve 2021 3779 ruby mysql gem client file read fixed
  3. Api security best practices for a changing attack surface
  4. Metasploit weekly wrap up 163
  5. Velociraptor version 0 6 5 table transformations multi lingual support and better vql error handling let you dig deeper than ever
  6. Cve 2022 31749 watchguard authenticated arbitrary file read write fixed
  7. Rapid7 mdr delivered 549 roi via headcount avoidance time savings and breach risk reduction
  8. Cve 2022 27511 citrix adm remote device takeover
  9. New report shows what data is most at risk to and prized by ransomware attackers
  10. Cve 2022 32230 windows smb denial of service vulnerability fixed
  11. Patch tuesday june 2022
  12. Defending against tomorrows threats insights from rsac 2022
  13. Video an inside look at the rsa 2022 experience from the rapid7 team
  14. Announcing metasploit 6 2
  15. Identifying cloud waste to contain unnecessary costs
  16. Evaluating the security of an enterprise iot deployment at dominos pizza
  17. The hidden harm of silent patches
  18. Cybersecurity is more than a checklist joel yonts on techs unfair disadvantage
  19. Metasploit weekly wrap up 160
  20. Active exploitation of confluence cve 2022 26134
  21. The average siem deployment takes 6 months dont be average

May 2022

  1. 3 takeaways from the 2022 verizon data breach investigations report
  2. Cve 2022 30190 follina microsoft support diagnostic tool vulnerability
  3. Metasploit weekly wrap up 158 2
  4. The rapid7 sales culture and experience an inside look from 2 vps
  5. What it takes to securely scale cloud environments at tech companies today
  6. A year on from the ransomware task force report
  7. Cve 2022 22977 vmware guest authentication service lpe fixed
  8. Dfir without limits
  9. Cve 2022 22972 critical authentication bypass in vmware workspace one access identity manager and vrealize automation
  10. Find fix and report owasp top 10 vulnerabilities in insightappsec
  11. Maximize your vm investment fix vulnerabilities faster with automox rapid7
  12. Metasploit weekly wrap up 156
  13. Update for cis google cloud platform foundation benchmarks version 1 3 0
  14. Cve 2022 30525 fixed zyxel firewall unauthenticated remote command injection
  15. Patch tuesday may 2022
  16. Whats changed for cybersecurity in banking and finance new study
  17. Active exploitation of f5 big ip icontrol rest cve 2022 1388
  18. Infographic cloud misconfigurations dont become a breach statistic
  19. Metasploit wrap up 154
  20. Xss in json old school attacks for modern applications
  21. Is your kubernetes cluster ready for version 1 24
  22. Mdr medr socaas which is right for you
  23. Cloud native application protection cnapp whats behind the hype

April 2022

  1. Metasploit wrap up 153
  2. Widespread exploitation of vmware workspace one access cve 2022 22954
  3. How to strategically scale vendor management and supply chain security
  4. Velociraptor version 0 6 4 dead disk forensics and better path handling let you dig deeper 2
  5. Opportunistic exploitation of wso2 cve 2022 29464
  6. Rapid7 named a visionary in 2022 magic quadrant for application security testing second year in a row
  7. 2022 cloud misconfigurations report a quick look at the latest cloud security breaches and attack trends
  8. Whats new in insightvm and nexpose q1 2022 in review
  9. Lets dance insightappsec and tcell bring new devsecops improvements in q1
  10. Cve 2022 28810 manageengine adselfservice plus authenticated command execution fixed
  11. Insightcloudsec supports the recently updated nsa cisa kubernetes hardening guide
  12. 3 ways insightidr users are achieving xdr outcomes
  13. Cve 2022 24527 microsoft connected cache local privilege escalation fixed
  14. Patch tuesday april 2022
  15. 7 rapid questions meet adrian stewart aspiring pilot turned product manager
  16. Metasploit wrap up 151
  17. Lessons in iot hacking how to dead bug a bga flash memory chip
  18. Mdr plus threat intel 414 new detections in 251 days youre welcome
  19. The forecast is flipped flipping l d in new hire training
  20. Security for all how the rapid7 cybersecurity foundation will expand access and inclusion
  21. Whats new in insightidr q1 2022 in review
  22. Sharpen your ir capabilities with rapid7s detection and response workshop
  23. Metasploit weekly wrap up 155
  24. Securing your applications against spring4shell cve 2022 22965

March 2022

  1. Mitre engenuity att ck evaluation insightidr drives strong signal to noise
  2. Spring4shell zero day vulnerability in spring framework
  3. Cloud pentesting pt 2 testing across different deployments
  4. Cve 2022 1026 kyocera net view address book exposure
  5. Analyzing the attack landscape rapid7s annual vulnerability intelligence report
  6. Rapid7 announces partner of the year awards 2022 winners
  7. Metasploit weekly wrap up 154
  8. Reflecting on womens history month at rapid7
  9. Rapid7 recognized as top ranked in current offering category in forrester wave for cloud workload security
  10. Siem and xdr whats converging whats not
  11. 8 tips for securing networks when time is scarce
  12. Cloud pentesting pt 1 breaking down the basics
  13. Metasploit weekly wrap up 153
  14. 3 ways insightidr customers leverage the mitre att ck framework
  15. The vm lifecycle how we got here and where were going
  16. Cybercriminals recruiting effort highlights need for proper user access controls
  17. Insightvm scanning demystifying ssh credential elevation
  18. An inside look at cisas supply chain task force
  19. Metasploit weekly wrap up 3
  20. Run faster log searches with insightidr
  21. 7rapid questions growing from bdr to commercial sales manager with maria loughrey
  22. New us laws to require cyber incident reports
  23. Cve 2022 0847 arbitrary file overwrite vulnerability in linux kernel
  24. Patch tuesday march 2022
  25. Insightvm scan engine understanding mac address discovery 2
  26. Graph analysis of the conti ransomware group internal chats
  27. Metasploit wrap up 150
  28. Russia ukraine cybersecurity updates
  29. Cve 2021 4191 gitlab graphql api user enumeration fixed
  30. The top 5 russian cyber threat actors to watch
  31. Insightappsec github integration keeps risky code from reaching production
  32. Conti ransomware group internal chats leaked over russia ukraine conflict

February 2022

  1. Metasploit weekly wrap up 2
  2. Russia ukraine conflict what is rapid7 doing to protect my organization
  3. Russia ukraine staying secure in a global cyber conflict
  4. Demystifying xdr how curated detections filter out the noise
  5. Metasploit wrap up 149
  6. Whats new in insightvm and nexpose q4 2021 in review
  7. Log4shell 2 months later security strategies for the internets new normal
  8. How insightappsec detects log4shell your questions answered
  9. Prudent cybersecurity preparation for the potential russia ukraine conflict
  10. Dropping files on a domain controller using cve 2021 43893
  11. Metasploit wrap up 148
  12. The forecast is flipped how rapid7 is flipping l d for the future of work
  13. Evolving how we share rapid7 research data 2
  14. Patch tuesday february 2022
  15. The big target on cyber insurers backs
  16. Metasploit wrap up 147
  17. 7rapid questions with our apac sales manager soumi
  18. Velociraptor version 0 6 3 dig deeper with more speed and scalability
  19. Demystifying xdr where siem and xdr collide

January 2022

  1. 2021 cybersecurity superlatives an insightidr year in review
  2. Metasploit wrap up 146
  3. Why security in kubernetes isnt the same as in linux part 1
  4. How ransomware is changing us federal policy
  5. 2022 planning metrics that matter and curtailing the cobra effect
  6. Active exploitation of vmware horizon servers
  7. 7rapid questions stephen donnelly
  8. Evaluating mdr vendors a pocket buyers guide
  9. Cve 2021 20038 42 sonicwall sma 100 multiple vulnerabilities fixed 2
  10. Patch tuesday january 2022
  11. Log4shell strategic response 5 practices for vulnerability management at scale
  12. Metasploit wrap up 144
  13. Whats new in threat intelligence 2021 year in review
  14. Whats new in insightidr q4 2021 in review
  15. Metasploit 2021 annual wrapup
  16. 5 security projects that are giving back

2021 226

December 2021

  1. Test for log4shell with insightappsec using new functionality
  2. Metasploit wrap up 143
  3. The everypersons guide to log4shell cve 2021 44228
  4. Log4j makes its appearance in hacker chatter 4 observations
  5. Patch tuesday december 2021
  6. Update on log4shells impact on rapid7 solutions and systems
  7. Using insightvm to find apache log4j cve 2021 44228
  8. Driver based attacks past and present
  9. Metasploit wrap up 142
  10. Stay ahead of threats with cloud workload protection
  11. Widespread exploitation of critical remote code execution in apache log4j
  12. A dream team up integrate insightappsec with servicenow itsm
  13. Demystifying xdr a forrester analyst lays the foundation
  14. Patch now sonicwall fixes multiple vulnerabilities in sma 100 devices
  15. 3 strategies that are more productive than hack back
  16. Oh no zoho active exploitation of cve 2021 44077 allowing unauthenticated remote code execution
  17. Congrats to the winners of the 2021 metasploit community ctf
  18. Deepfakes a nascent cybersecurity threat
  19. Insightcloudsec supports 12 new aws services announced at re invent
  20. Kubernetes guardrails bringing devops and security together on cloud
  21. Owasp top 10 deep dive identification and authentication failures

November 2021

  1. Active exploitation of apache http server cve 2021 40438
  2. Ongoing exploitation of windows installer cve 2021 41379
  3. Metasploit wrap up 140
  4. Owasp top 10 deep dive defending against server side request forgery
  5. 2022 planning a first year ciso shares her point of view
  6. Distribute reports to email addresses in insightvm
  7. Announcing the 2021 metasploit community ctf
  8. Better together xdr soar vulnerability management and external threat intelligence
  9. Thawing out the chilling effect of dmca section 1201
  10. Metasploit wrap up 138
  11. Hands on iot hacking rapid7 at defcon 29 iot village part 4
  12. Cve 2021 43287 allows pre authenticated build takeover of gocd pipelines
  13. Tcell by rapid7 supports the newly released net 6 0
  14. Update to glba security requirements for financial institutions
  15. Insightidr was xdr before xdr was even a thing an origin story
  16. Opportunistic exploitation of zoho manageengine and sitecore cves
  17. Owasp top 10 deep dive getting a clear view on vulnerable and outdated components
  18. Metasploit wrap up 137
  19. New npm library hijacks coa and rc
  20. Hands on iot hacking rapid7 at defcon 29 iot village part 3
  21. Trojan source cve 2021 42572
  22. Insightvm scan diagnostics troubleshooting credential issues for authenticated scanning
  23. A matter of perspective agent based and agentless approaches to cloud security part 2 2
  24. Gitlab unauthenticated remote code execution cve 2021 22205 exploited in the wild

October 2021

  1. Metasploit wrap up 136
  2. Hands on iot hacking rapid7 at defcon 29 iot village pt 2
  3. Sneaking through windows infostealer malware masquerades as windows application
  4. Securely advancing in the sunshine state rapid7 announces tampa office opening
  5. Npm library ua parser js hijacked what you need to know
  6. Recog data rules everything around me
  7. 2022 planning designing effective strategies to manage supply chain risk
  8. Hands on iot hacking rapid7 at defcon iot village pt 1
  9. A matter of perspective agent based and agentless approaches to cloud security part 1
  10. Owasp top 10 deep dive injection and stack traces from a hackers perspective
  11. Passwordless network scanning same insights less risk
  12. 4 simple steps for an effective threat intelligence program
  13. Turn on tune in drop the noise achieve better cloud security by reducing noise
  14. Kubernetes rbac swiss army knife
  15. Patch tuesday october 2021
  16. Metasploit wrap up 133
  17. Apache http server cve 2021 41773 exploited in the wild
  18. For microsoft exchange server vulnerabilities patching remains patchy
  19. Metasploit wrap up 132

September 2021

  1. The 2021 owasp top 10 have evolved heres what you should know
  2. Metasploit wrap up 131
  3. Metasploit uri support
  4. Rapid7 technical support building a career path with endless possibilities
  5. Critical vcenter server file upload vulnerability cve 2021 22005
  6. Login authentication goes automated with new insightappsec improvements
  7. Metasploit wrap up 130
  8. Sans 2021 threat hunting survey how organizations security postures have evolved in the new normal
  9. The ransomware killchain how it works and how to protect your systems
  10. Omigod how to automatically detect and fix microsoft azures new omi vulnerability
  11. Metasploit wrap up 129
  12. The rise of disruptive ransomware attacks a call to action
  13. Cloud challenges in the age of remote work rapid7s 2021 cloud misconfigurations report
  14. Cve 2021 3546 78 akkadian console server vulnerabilities fixed
  15. Metasploit wrap up 128
  16. Active exploitation of confluence server cve 2021 26084
  17. New rapid7 mdr capability sees what attackers see its eye opening

August 2021

  1. Cve 2021 3927 67 fortress s03 wifi home security system vulnerabilities
  2. Metasploit wrap up 127
  3. The cybersecurity skills gap is widening new study
  4. R evolution of the cyber threat intelligence practice
  5. Rapid7 mdr named a market leader again
  6. Metasploit wrap up 126
  7. Rapid7 announces partner of the year awards 2021 winners
  8. What it was like to attend black hat usa 2021 and def con 29 in person
  9. Fortinet fortiweb os command injection
  10. Metasploit wrap up 125
  11. When one door opens keep it open a new tool for physical security testing
  12. Popular attack surfaces august 2021 what you need to know
  13. Proxyshell more widespread exploitation of microsoft exchange servers
  14. Reforming the uks computer misuse act
  15. Cloud security glossary key terms to know
  16. Patch tuesday august 2021
  17. Hack back is still wack
  18. Slot machines and cybercrime why ransomware wont quit pulling our lever
  19. Petitpotam novel attack chain can fully compromise windows domains running ad cs
  20. 3 steps to integrate rapid7 products into the devsecops cycle

July 2021

  1. Metasploit wrap up 123
  2. Multiple open source web app vulnerabilities fixed
  3. Decrypter fomo no mo five years of the no more ransom project
  4. Metasploit wrap up 122
  5. Microsoft sam file readability cve 2021 36934 what you need to know
  6. Extended detection response
  7. Insight platform and extended detection response
  8. Rapid7 acquires intsights
  9. Metasploit wrap up 121
  10. Why the robot hackers arent here yet
  11. Managed service providers used in coordinated mass ransomware attack impacting hundreds of companies
  12. Patch tuesday july 2021
  13. Solarwinds serv u ftp and managed file transfer cve 2021 35211 what you need to know
  14. Metasploit wrap up 120
  15. Securing the supply chain lessons learned from the codecov compromise
  16. Apple m1 support on insight agent
  17. Introducing the manual regex editor in idrs parsing tool part 2
  18. Cve 2020 7387 7390 multiple sage x3 vulnerabilities
  19. Introducing insightcloudsec
  20. Introducing the manual regex editor in idrs parsing tool part 1

June 2021

  1. Cve 2021 1675 printnightmare patch does not remediate vulnerability
  2. Forgerock openam pre auth remote code execution vulnerability what you need to know
  3. Rapid7life belfast why i joined
  4. Yes fraudsters can bypass the strong customer authentication sca requirement
  5. Kill chains part 3 whats next
  6. Metasploit wrap up 118
  7. The ciso as an ethical leader building accountability into cybersecurity
  8. Cve 2021 20025 sonicwall email security appliance backdoor credential
  9. Rapid7 joins statement
  10. Automated remediation level 2 best practices
  11. Metasploit wrap up 117
  12. Attack surface analysis part 2 penetration testing
  13. Metasploit wrap up 116
  14. Attack surface analysis part 1 vulnerability scanning
  15. Akkadian provisioning manager multiple vulnerabilities disclosure
  16. Patch tuesday june 2021
  17. Benefits of automated remediation part 1
  18. Kill chains part 2 strategic and tactical use cases
  19. All about the boundaries the cloud iam lifecycle approach
  20. Metasploit wrap up 115
  21. Proposed security researcher protection under cfaa 2
  22. Supreme court narrows cfaa
  23. Untitled cve 2021 3198 and cve 2021 3540 mobileiron shell escape privilege escalation vulnerabilities

May 2021

  1. Metasploit wrap up 113
  2. Kill chains part 1 strategic and operational value
  3. Cve 2021 21985 vcenter server what you need to know
  4. Reducing risk with identity access management iam
  5. Metasploit wrap up 112
  6. Rapid7s 2021 icer takeaways vulnerability disclosure programs among the fortune 500
  7. A look into remote onboarding at rapid7
  8. Metasploit wrap up 111
  9. Rapid7s 2021 icer takeaways high risk services among the fortune 500
  10. Rapid7s response to codecov incident
  11. Patch tuesday dashboard template release
  12. Patch tuesday may 2021
  13. Metasploit wrap up 110
  14. Mdr vendor must haves part 9 assigned analyst pods and security program advisors
  15. Grow develop and impact more than just your career software engineering at rapid7 belfast
  16. Kubernetes security is not container security

April 2021

  1. Metasploit wrap up 109
  2. Mdr vendor must haves part 8 rapid7 incident response breach support
  3. Active exploitation of pulse connect secure zero day cve 2021 22893
  4. Rapid7 and velociraptor join forces
  5. How to turbocharge your phishing response plan
  6. Overview of the eus draft nis 2 directive
  7. Rapid7 announces kubernetes integration general availability in insightvm
  8. Codecov discloses supply chain compromise
  9. Insider assisted attacks prove costly for telecoms
  10. Metasploit wrap up 107
  11. Rapid7 announces general availability for scoped executive summary report in insightvm
  12. Cve 2021 26908 and cve 2021 26909 automox agent information disclosure fixed
  13. Patch tuesday april 2021
  14. Mdr vendor must haves part 5 multiple threat detection methodologies including deep attacker behavior analysis
  15. Metasploit wrap up 106
  16. Attackers targeting fortinet devices and sap applications
  17. Kubernetes namespaces are not as secure as you think
  18. Looking back and moving forward with rapid7s cloud security solution
  19. Mdr vendor must haves part 4 ingestion of authentication data across local domain and cloud sources

March 2021

  1. Mdr vendor must haves part 2 ingestion of network device data
  2. Divvycloud adds support for iam analyzer policy recommendations
  3. Metasploit wrap up 104
  4. Attack vs data what you need to know about threat hunting
  5. Defending against the zero day analyzing attacker behavior post exploitation of microsoft exchange
  6. Soc automation with insightidr and insightconnect three key use cases to explore to optimize your security operations 2
  7. Metasploit wrap up 103
  8. F5 discloses eight vulnerabilities including four critical ones in big ip systems
  9. Rapid7 announces release of new tcell amazon cloudfront agent
  10. Metasploit wrap up 102
  11. Introducing the vulnerability intelligence report 50 cves that made headlines in 2020
  12. Patch tuesday march 2021
  13. Metasploit wrap up 101
  14. Mass exploitation of exchange server zero day cves what you need to know
  15. Rapid7s insightidr enables detection and response to microsoft exchange 0 day

February 2021

  1. Celebrating black history today and every day
  2. Metasploit wrap up 100
  3. Building a holistic vrm strategy that includes the web application layer
  4. Multiple unauthenticated remote code control and execution vulnerabilities in multiple cisco products
  5. Software engineering vulnerability and risk management revolutionizing the security landscape at rapid7
  6. Vmware vcenter server cve 2021 21972 remote code execution vulnerability what you need to know
  7. How to combat alert fatigue with cloud based siem tools
  8. Metasploit wrap up 99
  9. Securing your web app one robot at a time
  10. Monitor google cloud platform gcp data with insightidr
  11. Metasploit wrap up 98
  12. New insightvm dashboard helps you discover significant changes in your environment from the past 30 days
  13. Talkin smac alert labeling and why it matters
  14. Cve 2021 22652 advantech iview missing authentication rce fixed
  15. Patch tuesday february 2021
  16. Metasploit wrap up 97
  17. Cisco patches recently disclosed sudo vulnerability cve 2021 3156 in multiple products
  18. Vulnerability scanning with the metasploit remote check service beta release
  19. Addressing the ot it risk and asset inventory gap
  20. Rapid7 acquires leading kubernetes security provider alcide

January 2021

  1. Metasploit wrap up 96
  2. Nicer protocol deep dive internet exposure of http and https
  3. State sponsored threat actors target security researchers
  4. Metasploit wrap up 95
  5. Nicer protocol deep dive internet exposure of ntp
  6. You can now buy and renew five more rapid7 products through aws marketplace
  7. Metasploit wrap up 94
  8. Nicer protocol deep dive internet exposure of dns over tls
  9. Update on solarwinds supply chain attack sunspot and new malware family associations
  10. Metasploit wrap up 93
  11. Nicer protocol deep dive internet exposure of dns
  12. Haxmas hardware hacking

2020 199

December 2020

  1. Metasploit 2020 wrap up
  2. Rapid7 labs 2020 naughty list summary report to santa
  3. Metasploit tips and tricks for haxmas 2020 2
  4. Set new insightvm goals and share with your team for increased visibility and more efficient execution
  5. Upnp with a holiday cheer
  6. Metasploit wrap up 92
  7. Whats new in insightidr q4 2020 in review
  8. 3 security regulations automotive companies need to know
  9. How to gain visibility into audit logs for policy customization in insightvm
  10. Sending the all clear signal the implications of whatsapps new data privacy policy
  11. The risky business rapid7 report highlights need for improved vulnerability management practices
  12. Solarwinds sunburst backdoor supply chain attack what you need to know
  13. Metasploit wrap up 91
  14. New all apps and asset report combines power of insightvm and insightappsec for boosted visibility
  15. 2020 under the hoodie report reveals pen testers most loved vulnerabilities
  16. Congrats to the winners of the 2020 december metasploit community ctf
  17. How to create an os based policy scanning workflow in insightvm
  18. Metasploit wrap up 90
  19. A holistic approach to kubernetes security and compliance
  20. Threat and vulnerability management best practices

November 2020

  1. Nicer protocol deep dive internet exposure of redis
  2. Cve 2020 7378 opencrx unverified password change
  3. Nicer protocol deep dive internet exposure of microsoft sql server ms sql udp 1434
  4. Metasploit wrap up 88
  5. This one time on a pen test csrf to password reset phishing
  6. Dont put it on the internet tesla backup gateway edition
  7. Metasploit wrap up 87
  8. Nicer protocol deep dive internet exposure of mysql
  9. Vmware esxi openslp remote code execution vulnerability cve 2020 3992 and cve 2019 5544 what you need to know
  10. Saltstack pre authenticated remote root cve 2020 16846 and cve 2020 25592 what you need to know
  11. Visualizing network traffic data to drive action
  12. Advance your career life as a rapid7 belfast software engineer
  13. Metasploit wrap up 86
  14. This one time on a pen test how i hacked a self driving car
  15. Nicer protocol deep dive internet exposure of citrix adc netscaler
  16. The story behind security breaches
  17. Overview of content security policies csp on the web

October 2020

  1. Oracle weblogic unauthenticated complete takeover cve 2020 14882 what you need to know
  2. Scan template best practices in insightvm
  3. Nicer protocol deep dive internet exposure of remote desktop rdp
  4. Vulntober multiple mobile browser address bar spoofing vulnerabilities
  5. Are you still running end of life windows servers
  6. Nicer protocol deep dive internet exposure of imap and pop
  7. Fewer false alarms faster reporting insightvm introduces new one click fix for false positives
  8. Introducing enhanced endpoint telemetry eet in insightidr
  9. Heartland dentals ambitions land them in the cloud
  10. There goes the neighborhood dealing with cve 2020 16898 a k a bad neighbor
  11. Metasploit wrap up 82
  12. Nicer protocol deep dive internet exposure of vnc
  13. This one time on a pen test doing well with xml
  14. Easily explore your log data with a single query in insightidr
  15. Ransomware payments and sanctions u s treasury advisory
  16. Hp device manager cavalcade of critical cves cve 2020 6925 6927 what you need to know
  17. Metasploit wrap up 81
  18. Nicer protocol deep dive internet exposure of smtp
  19. Rapid7 introduces active response for end to end detection and response

September 2020

  1. Exploitability analysis smash the ref bug class
  2. Microsoft exchange 2010 end of support and overall patching study
  3. Metasploit wrap up 80
  4. Nicer protocol deep dive internet exposure of rsync
  5. Define what to parse from logs with the custom parsing tool in insightidr
  6. Nicer protocol deep dive internet exposure of smb
  7. Title decentralize remediation efforts to gain more efficiency with insightvm
  8. This one time on a pen test outwitting the vexing vpn
  9. Cve 2020 1472 zerologon critical privilege escalation
  10. Nicer protocol deep dive internet exposure of ftp s tcp 990
  11. Vulnerability remediation vs mitigation whats the difference
  12. Metasploit wrap up 79
  13. How to track and remediate default account vulnerabilities in insightvm
  14. How rapid7 is transforming an on premises soar tool into a cloud first automation platform
  15. Metasploit wrap up 78
  16. Nicer protocol deep dive internet exposure of ftp
  17. This one time on a pen test playing social security slots

August 2020

  1. Why i joined rapid7 5
  2. How three insightvm customers scaled their vulnerability management programs with rapid7
  3. Nicer protocol deep dive secure shell ssh
  4. Untitled 5
  5. Insightidr demo cloud native siem vs modern security challenges
  6. Life as a rapid7 rotato launch your career
  7. Metasploit wrap up 77
  8. Nicer protocol deep dive internet exposure of telnet services
  9. Automated external sonar scanning workflow with insightvm
  10. Join team moose become a rapid7 bdr
  11. Stop attackers in their tracks with insight agent quarantine
  12. Data ingestion and data digestion what siem log consumption tells us about modern attack patterns
  13. Three things you can expect as an intern at rapid7
  14. Rapid7 named a leader in the 2020 forrester wave for midsize managed security services providers q3 2020
  15. Metasploit wrap up 76
  16. Metasploit 6 now under active development
  17. Virtual black hat rapid7 experts share key takeaways from day 1 sessions 2
  18. Insightidr connects to zoom for easy monitoring

July 2020

  1. Metasploit wrap up 75
  2. Cloud best practices every security professional should know
  3. Remote code execution risks in secomea moxa and hms ewon ics vpn vulnerabilities what you need to know
  4. Plugin development made easy with rapid7
  5. Hear from your peers advice for your first 90 days using a vulnerability management solution
  6. Metasploit wrap up 74
  7. Cve 2020 3452 cisco asa firepower read only path traversal vulnerability what you need to know
  8. Q a from june 2020 customer webcast on insightvm custom policy builder
  9. Defense in depth using deception technology in insightidr
  10. Metasploit wrap up 73
  11. Top 5 ways to get a network traffic source on your network
  12. Pay attention to your sap security
  13. Unlocking the power of macro authentication in application security part three
  14. Windows dns server remote code execution vulnerability cve 2020 1350 what you need to know
  15. Metasploit wrap up 72
  16. Seeing value from day one what you need to know about cloud siem deployment and configuration
  17. Rapid7 named a june 2020 gartner peer insights customers choice for siem
  18. Metasploit wrap up 71
  19. How to use custom policy builder to customize password policies in insightvm

June 2020

  1. Unlocking the power of macro authentication in application security part two
  2. Building a printed circuit board probe testing jig
  3. Cve 2020 2021 authentication bypass in pan os security assertion markup language saml authentication disclosed
  4. Rapid7 managed detection and response mdr the service that never sleeps
  5. Metasploit wrap up 69
  6. How rapid7 customers are using network traffic analysis in detection and response
  7. Siem security tools four expensive misconceptions
  8. Unlocking the power of macro authentication part one
  9. Introducing a new insightvm dashboard to monitor external and remote workforce assets in your environment
  10. Metasploit wrap up 68
  11. Support faqs managing your organizations security in response to covid 19
  12. How team collaboration can help you scale the vulnerability mountain
  13. Maturing your security posture around the clock threat detection with managed detection response mdr services
  14. Confessions of a former ciso shaming people for bad security
  15. Custom policy builder is now in open preview in insightvm
  16. Leaked youtube credentials growing in popularity on dark web forums

May 2020

  1. Metasploit wrap up 66
  2. The masked synger investigating a traffic phenomenon
  3. Q a from april 2020 customer webcast on insightvm dashboards executive summary report
  4. Metasploit wrap up 64
  5. Moving toward a better signature metric in socs detection efficacy
  6. How to simplify insightconnect workflows using join step
  7. Best practices for securing e commerce applications
  8. May 2020 cisco remote vulnerabilities guidance
  9. Metasploit wrap up 63
  10. Why soar is an essential cybersecurity tool for financial services companies
  11. Metasploit wrap up 62

April 2020

  1. Rapid7s full stack vulnerability risk management portfolio recognized for application security capabilities 2
  2. Rapid7 announces intent to acquire divvycloud
  3. Cve 2020 12271 sophos xg firewall pre auth sql injection vulnerability remediation guidance and exposure overview
  4. Stuck inside top books we recommend security pros read during quarantine
  5. How insightidr is accelerating detection and response in modern environments
  6. Metasploit wrap up 60
  7. Uncooking eggs manual dridex dropper malicious document deobfuscation methods
  8. Nmap service detection for nexpose and insightvm scan engines
  9. Meet attackerkb
  10. Preparing for the cybersecurity maturity model certification cmmc part 1 practice and process
  11. Remote work readiness how to keep a security mindset
  12. Metasploit wrap up 59
  13. Self isolation home networking and open source recog and rumble
  14. 8 steps to successfully implement the cis top 20 controls in your organization
  15. 4 common goals for vulnerability risk management programs
  16. Phishing for system on microsoft exchange cve 2020 0688
  17. Analyze security data faster with visual search in insightidr
  18. Dispelling zoom bugbears what you need to know about the latest zoom vulnerabilities
  19. Soc automation accelerate threat detection and response with siem and soar
  20. How to measurably reduce false positive vulnerabilities by up to 22

March 2020

  1. Rapid7 named a march 2020 gartner peer insights customers choice for vulnerability assessment
  2. Automating multi factor authentication time based one time passwords
  3. Active exploitation of unpatched windows font parsing vulnerability
  4. Metasploit wrap up 56
  5. Redefining how to measure the success of your vulnerability management program
  6. How rapid7 customer hilltop holdings integrates security tools for a multi layered approach
  7. How to understand the tco and roi of your vulnerability management program
  8. Metasploit wrap up 55
  9. Cve 2020 0796 microsoft smbv3 remote code execution vulnerability analysis
  10. Network traffic analysis 3 common threats found in network data
  11. How to secure containers applications and serverless environments
  12. R7 2019 39 cve 2019 5648 ldap credential exposure in barracuda load balancer adc fixed
  13. Lessons learned from an unlikely path to my oscp certification

February 2020

  1. How to improve vulnerability patching efficiency through automation
  2. Metasploit wrap up 53
  3. How mdr soc customer tony hamill leverages the automation of insightconnect
  4. Metasploit wrap up 52
  5. Dig deeper in insightappsec with new custom dashboards feature
  6. Rapid7 named a leader in 2020 gartner magic quadrant for security information and event management
  7. Servicenow cmdb asset import using the insightvm integration for servicenow cmdb
  8. Insightvm insightappsec a love story
  9. Metasploit wrap up 51
  10. Ask a pen tester q a part 2 everything you need to know about the art of penetration testing
  11. How to handle misconfigurations in the cloud
  12. Intro to the soc visibility triad
  13. Cdpwn cve 2020 3118
  14. Doublepulsar over rdp baselining badness on the internet
  15. Doublepulsar rce 2 an rdp story

January 2020

  1. How to measure the roi of your vulnerability risk management solution
  2. Metasploit wrap up 50
  3. How to analyze your log data using the log search api in insightidr
  4. Discover the new bmc remedy itsm plugin for insightconnect
  5. Vulnerability management in the cloud addressing the aws shared responsibility model
  6. Better together how to collaborate to drive vulnerability remediation among security it and devops teams
  7. Active exploitation of citrix netscaler cve 2019 19781 what you need to know
  8. How to get started with the insightvm integration for servicenow cmdb
  9. Metasploit wrap up 49
  10. Cve 2020 0601 windows cryptoapi spoofing vulnerability what you need to know
  11. How pci compliance helps keep your apps credit card data safe
  12. Simplify your data search with query builder in insightvm
  13. Challenges and best practices with vulnerability risk management collaboration
  14. Automating application security processes with the insightappsec api

← 2006–2019