The Rapid7 Blog:
Your Signal in the Security Noise
Insights, stories, and guidance from our global security and research teams.
Featured posts
3895 Results
Threat Research
From a Single Alert to 1,000 Files: Inside an Exposed WebDAV Malware Delivery Lab
Anna Širokova, Jan Recinsky
Vulnerabilities and Exploits
CVE-2026-63030: wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core
Rapid7 Labs
Products and Tools
Metasploit Wrap Up: An HTTP to SMB relay plus Payload Improvements
Christopher Granleese
Vulnerabilities and Exploits
CVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild
Rapid7
Vulnerabilities and Exploits
Sunsetting the Public AttackerKB Platform
Douglas McKee, Director, Vulnerability Intelligence
Vulnerabilities and Exploits
Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)
Rapid7
Detection and Response
Investigating Persistence Mechanisms in AWS
Jan Blažek
Exposure Management
Patch Tuesday - July 2026
Adam Barnett
Vulnerabilities and Exploits
CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED)
Stephen Fewer
Culture
Rapid7 and Mindshare Partner to Accelerate Cyber Resilience Across the Middle East
Gopan Sivasankaran
Products and Tools
Weekly Metasploit Update: Exploits for FlowiseAI CSV Agent and MacOS Package Kit
Jack Heysel
Detection and Response
Security Teams Are Ready To Become More Preemptive. What’s Holding Them Back?
Emma Burdett
Security Operations
A Day With Your Vector Command Red Team Pod
Trevor Christiansen
Products and Tools
Weekly Metasploit Update: Modules for SMB-to-Meterpreter, Peyara Remote Mouse RCE exploit, and more
Jack Heysel
Security Operations
Formalizing Red Teaming Offensive Methodology as a Multi-Agent AI Architecture
Jacob Steadman
Artificial Intelligence
5 Myths About AI in the SOC Security Teams Need to Rethink
Emma Burdett
Artificial Intelligence
Modernizing Global Vulnerability Standards For The Age Of AI
Sabeen Malik
Products and Tools
Weekly Metasploit Update: Modules for Audiobookshelf, LiteLLM, Next.js, Dalfox and more
Simon Janusz
Industry Trends
Experts on Experts: Why AI and Compliance Are Forcing A New Security Operating Model
Corey Thomas
Detection and Response
Why SIEM is Moving Toward Unified Security Operations: Rapid7 Named a Major Player in IDC MarketScape
Rapid7
Products and Tools
Weekly Metasploit Update: NTLM Relay Priv Esc, MCP Server Integration, Paperclip AI RCE Chain, and more
Alan David Foster