Author

boB Rudis

Bob Rudis has over 20 years of experience defending companies using data and is currently [Master] Chief Data Scientist at Rapid7, where he specializes in research on internet-scale exposure.

Remote Code Execution Risks in Secomea, Moxa, and HMS eWon ICS VPN Vulnerabilities: What You Need to Know

CVE-2020-3452 Cisco ASA / Firepower Read-Only Path Traversal Vulnerability: What You Need to Know

Windows DNS Server Remote Code Execution Vulnerability (CVE-2020-1350): What You Need to Know

CVE-2020-2021 Authentication Bypass in PAN-OS Security Assertion Markup Language (SAML) Authentication Disclosed

May 2020 Cisco Remote Vulnerabilities Guidance

CVE-2020-12271: Sophos XG Firewall Pre-Auth SQL Injection Vulnerability Remediation Guidance and Exposure Overview

Oh, Behave! Who Made It to Rapid7 Labs' Naughty List(s) in 2019?

Cisco Self-Signed Certificate Expiration on Jan. 1, 2020: What You Need to Know

CVE-2019-15846 Privileged Remote Code Execution Vulnerability in the Exim Mailer: What You Need to Know

August 2019 Microsoft Remote Desktop Services (RDP) Patches: What You Need to Know

BlueKeep Exploits May Be Coming: Our Observations and Recommendations

Microsoft Windows RDP Network Level Authentication Bypass (CVE-2019-9510)

Confluence Unauthorized RCE Vulnerability (CVE-2019-3396): What You Need to Know

Apache HTTP Server Privilege Escalation (CVE-2019-0211): What You Need to Know

Cisco® RV110/RV130/RV215 Unauthenticated Configuration Export Vulnerability (CVE-2019-1663): What You Need to Know

Drupal Core Remote Code Execution (CVE-2019-6340): What You Need to Know

Level Up Your Internet Intelligence Using the Rapid7 Open Data API and R

Cisco RV320/RV325 Router Unauthenticated Configuration Export Vulnerability (CVE-2019-1653): What You Need to Know

PHP Extension and Application Repository (PEAR) Compromise: What You Need to Know

How Retailers Can Protect Against Magecart This Black Friday and Holiday Season

CVE 100K: By The Numbers