The Rapid7 Blog:
Your Signal in the Security Noise
Insights, stories, and guidance from our global security and research teams.
Featured posts
3726 Results
Products and Tools
Weekly Metasploit Update: Apache ActiveMQ RCE, Gogs Rebase RCE, and Windows Kernel Pointer Enum
Brendan Watters
Detection and Response
How the “Swiss Cheese” model can help you choose the right MDR provider
David Higgs
Industry Trends
A Day in the Life of an MDR Analyst: Inside the Modern SOC
Emma Burdett
Vulnerabilities and Exploits
CVE-2026-0826: How an Old Bug Can Feed AI-Powered Impersonation
Douglas McKee, Director, Vulnerability Intelligence
Vulnerabilities and Exploits
CVE-2026-0826: Critical unauthenticated stack buffer overflow in HP Poly VVX and Trio VoIP Phones (FIXED)
Stephen Fewer
Culture
Rapid7 and Exclusive Networks Expand Partnership Across the Nordics
Mike Ryan
Products and Tools
Metasploit Wrap Up 05/29/2026
Spencer McIntyre
Vulnerabilities and Exploits
Rapid7 Observed Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)
Rapid7
Industry Trends
Experts on Experts: Why Compliance is becoming Continuous
Craig Adams
Vulnerabilities and Exploits
Authenticated RCE via Argument Injection in Gogs (NOT FIXED)
Jonah Burgess
Industry Trends
How Security Leaders Cut Through Complexity to Drive Better Outcomes
Emma Burdett
Products and Tools
Metasploit Wrap Up 05/22/2026
Martin Sutovsky
Threat Research
Q1 2026 Threat Landscape Report: Zero-clicks, geopolitical tensions, and some wins for law enforcement
Rapid7 Labs
Exposure Management
Operationalizing CTEM Faster: Build Surface Command Dashboards in Minutes
Ed Montgomery
Industry Trends
Rapid7’s 2026 Global Cybersecurity Summit: Key Takeaways for Security Leaders
Emma Burdett
Products and Tools
Metasploit Wrap-Up 05/15/2026
Martin Sutovsky
Vulnerabilities and Exploits
CVE-2026-0265: Authentication Bypass in Palo Alto Networks PAN-OS
Rapid7
Vulnerabilities and Exploits
CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED)
Jonah Burgess, Stephen Fewer
Vulnerabilities and Exploits
The Dark Side of Efficiency: When Network Controllers Become "God Mode" for Attackers
Douglas McKee, Director, Vulnerability Intelligence
Threat Research
When IT Support Calls: Dissecting a ModeloRAT Campaign from Teams to Domain Compromise
Anna Širokova
Culture
Rapid7 Partner Academy: Driving Impact with Gold Stevie Award-Winning Partner Services Certifications
Rapid7