Author

Rapid7

CVE-2026-111497: Critical out-of-bounds write in the Node.js Brotli decoder

CVE-2026-109618 and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

How Multi-Campus Universities can Build a more Connected Security Program

Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab

Four compliance frameworks, one security team: Why fragmented university security raises regulatory risk

CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products

How AI Is Changing the Roles Required in the Security Operations Center

Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Higher education is under siege, and fragmented security is making it harder to respond

Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

How dynamic application security testing validates risk at runtime

CVE-2026-94127: Critical Unauthenticated RCE in F5 BIG-IP APM

CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

Rapid7 Named Among Notable Vendors in Forrester MDR Landscape: Why the Future is Exposure-informed, Preemptive MDR

CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild

Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild

PaperCut NG/MF Critical Zero-Day Exploited in the Wild

CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway

AI is Working in the SOC. So Why are Security Executives More Worried Than Ever?