Threat Research

Explore the latest Rapid7 articles and research about Threat Research.

Latest articles about Threat Research

Windows DNS Server Remote Code Execution Vulnerability (CVE-2020-1350): What You Need to Know

Rapid7 Analysis: CVE-2020-6287: Critical Vulnerability in SAP NetWeaver Application Server (AS) Java

Rapid7 Intelligence

Rapid7 Analysis: CVE-2020-2034 — PAN-OS: OS command injection vulnerability in GlobalProtect portal

Rapid7 Intelligence

Rapid7 Analysis: CVE-2020-5902 — TMUI RCE vulnerability

Rapid7 Intelligence

Rapid7 Analysis: CVE-2020-2021 PAN-OS: Authentication Bypass in SAML Authentication

Rapid7 Intelligence

The Masked SYNger: Investigating a Traffic Phenomenon

matthew berninger

Meet AttackerKB

CVE-2020-0796: Microsoft SMBv3 Remote Code Execution Vulnerability Analysis

DOUBLEPULSAR over RDP: Baselining Badness on the Internet

Active Exploitation of Citrix NetScaler (CVE-2019-19781): What You Need to Know

Oh, Behave! Who Made It to Rapid7 Labs' Naughty List(s) in 2019?

Cisco Self-Signed Certificate Expiration on Jan. 1, 2020: What You Need to Know

How I Shut Down a (Test) Factory with a Single Layer 2 Packet

Andreas Galauner

R7-2019-32: Denial-of-Service Vulnerabilities in Beckhoff TwinCAT PLC Environment

This One Time on a Pen Test: Missed a Spot

New Research: Investigating and Reversing Avionics CAN Bus Systems

Attack Surface Monitoring with Project Sonar

Extracting Firmware from Microcontrollers' Onboard Flash Memory, Part 3: Microchip PIC Microcontrollers

Extracting Firmware from Microcontrollers' Onboard Flash Memory, Part 2: Nordic RF Microcontrollers

Confluence Unauthorized RCE Vulnerability (CVE-2019-3396): What You Need to Know

Apache HTTP Server Privilege Escalation (CVE-2019-0211): What You Need to Know