The Rapid7 Blog:
Your Signal in the Security Noise
Insights, stories, and guidance from our global security and research teams.
Featured posts
3912 Results
Vulnerabilities and Exploits
Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066)
Jonah Burgess
Products and Tools
Metasploit Pro 5.1 Released
The Metasploit Team
Culture
Rapid7 Expands UK and Ireland Channel Presence Through Strategic Partnership with Exclusive Networks
Ross Baker
.png?width=3840&quality=75){kind=logo}
Detection and Response
Rapid7 at Black Hat USA 2026: See preemptive security in action
Emma Burdett
Vulnerabilities and Exploits
KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails
Rapid7 Labs
.jpeg?width=3840&quality=75)
Detection and Response
Rapid7 named a Leader in the IDC MarketScape: Worldwide MDR Service for Midmarket 2026 Vendor Assessment
Rapid7
Products and Tools
Metasploit Framework 6.5 Released
The Metasploit Team
Vulnerabilities and Exploits
Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)
Rapid7
Vulnerabilities and Exploits
CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity
Rapid7
Products and Tools
How AI is Rewriting the Zero-Day Playbook for Preemptive Security
Joel Alcon
Vulnerabilities and Exploits
Check Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232)
Stephen Fewer
Detection and Response
The Next Evolution of MDR: Preemptive Defense and Agentic Investigation
Mikayla Wyman
Products and Tools
Rapid7 Cyber GRC is now available: Turn security action into compliance proof
Michael Chroney
Culture
Rapid7 and Exclusive Networks expand partnership to modernize security operations and accelerate customer success
Claudia Zoon
Artificial Intelligence
What Happened Between OpenAI and Hugging Face?
Wade Woolwine
Vulnerabilities and Exploits
CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild
Rapid7
Products and Tools
What’s New in Rapid7 Products and Services: Q2 2026 in Review
Ed Montgomery
Threat Research
From a Single Alert to 1,000 Files: Inside an Exposed WebDAV Malware Delivery Lab
Anna Širokova, Jan Recinsky
Vulnerabilities and Exploits
CVE-2026-63030: wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core
Rapid7 Labs
Products and Tools
Metasploit Wrap Up: An HTTP to SMB relay plus Payload Improvements
Christopher Granleese
Vulnerabilities and Exploits
CVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild
Rapid7