Author

Rapid7 Labs

DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors

New Report: AI threats are here. Why Q2 2026 signals the end of traditional patch cycles

Metasploit Wrap Up: Lot of summer shells and fit http profiles

KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails

CVE-2026-63030: wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core

Rapid7 Quarterly Threat Landscape Report: Zero-clicks, geopolitical tensions, and some wins for law enforcement

New Whitepaper: Stealthy BPFDoor Variants are a Needle That Looks Like Hay

Initial Access Brokers have Shifted to High-Value Targets and Premium Pricing

BPFdoor in Telecom Networks: Sleeper Cells in the Backbone

The Attack Cycle is Accelerating: Announcing the Rapid7 2026 Global Threat Landscape Report

Rapid7 Detection Coverage for Iran-Linked Cyber Activity

Iran’s Cyber Playbook in the Escalating Regional Conflict

Rapid7 Analysis: CVE-2026-20127

Critical Cisco Catalyst Vulnerability Exploited in the wild (CVE-2026-20127)

Rapid7 Analysis: CVE-2026-1731

Rapid7 Analysis: CVE-2025-37164

Rapid7 Analysis: CVE-2025-58034

Rapid7 Analysis: CVE-2025-12480

When Your Calendar Becomes the Compromise

Salt Typhoon APT Group: What Public Sector Leaders and Defenders Should Know

Rapid7 Analysis: CVE-2025-20362