All Articles

SMTP is the key: BPFDoor and AVERAT hitting the network edge

Rapid7 Intelligence

How AI Is Changing the Roles Required in the Security Operations Center

Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Higher education is under siege, and fragmented security is making it harder to respond

Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?

The Metasploit Team

When Business Email Compromise Starts Rewriting Reality

Douglas McKee, Director, Vulnerability Intelligence

How dynamic application security testing validates risk at runtime

CVE-2026-94127: Critical Unauthenticated RCE in F5 BIG-IP APM

CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

Rapid7 Named Among Notable Vendors in Forrester MDR Landscape: Why the Future is Exposure-informed, Preemptive MDR

CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild

Metasploit Wrap Up: This One Goes to Sixteen!

Brendan Watters

The Fraud Ecosystem: A Transition From Known Marketplaces to a Fragmented Environment

Credentialed Pre-Port Discovery: Don't Probe the Host, Ask it

Conor McCormick

Patch Tuesday - September 2026

CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)

DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors

Rapid7 Intelligence

Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild

Metasploit Wrap Up: Payloads and Exploits, and Scanners, Oh my!

The Metasploit Team

PaperCut NG/MF Critical Zero-Day Exploited in the Wild