All Articles

Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules

The Metasploit Team

Four compliance frameworks, one security team: Why fragmented university security raises regulatory risk

CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products

The ASOS Incident: When Attackers Use the Channels Customers Trust

Securing Agent-to-Agent Communication: The Next Identity Frontier

SMTP is the key: BPFDoor and AVERAT hitting the network edge

Rapid7 Intelligence

How AI Is Changing the Roles Required in the Security Operations Center

Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Higher education is under siege, and fragmented security is making it harder to respond

Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?

The Metasploit Team

When Business Email Compromise Starts Rewriting Reality

Douglas McKee, Director, Vulnerability Intelligence

How dynamic application security testing validates risk at runtime

CVE-2026-94127: Critical Unauthenticated RCE in F5 BIG-IP APM

CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild

Rapid7 Named Among Notable Vendors in Forrester MDR Landscape: Why the Future is Exposure-informed, Preemptive MDR

CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild

Metasploit Wrap Up: This One Goes to Sixteen!

Brendan Watters

The Fraud Ecosystem: A Transition From Known Marketplaces to a Fragmented Environment

Credentialed Pre-Port Discovery: Don't Probe the Host, Ask it

Conor McCormick

Patch Tuesday - September 2026