The Rapid7 Blog:
Your Signal in the Security Noise

Insights, stories, and guidance from our global security and research teams.

Weekly security updates — no spam. Privacy Policy.

Metasploit Wrapup: 10/19/18

Products and Tools

Metasploit Wrapup: 10/19/18

Wei Chen's avatar

Wei Chen

National Cybersecurity Awareness Month: Tips for Improving Your Personal Pa55w0rd! Management

Industry Trends

National Cybersecurity Awareness Month: Tips for Improving Your Personal Pa55w0rd! Management

Tod Beardsley's avatar

Tod Beardsley

Take a Bite out of the Vulnerability Remediation Backlog with InsightVM

Security Operations

Take a Bite out of the Vulnerability Remediation Backlog with InsightVM

Justin Buchanan's avatar

Justin Buchanan

Universal Event Formats in InsightIDR: A Step-by-Step NXLog Guide

Detection and Response

Universal Event Formats in InsightIDR: A Step-by-Step NXLog Guide

Teresa Copple's avatar

Teresa Copple

How to Conduct DNS Reconnaissance for $.02 Using Rapid7 Open Data and AWS

Threat Research

How to Conduct DNS Reconnaissance for $.02 Using Rapid7 Open Data and AWS

Shan Sikdar's avatar

Shan Sikdar

Rapid7 Acquires Leading Web Application Security Provider, tCell

Products and Tools

Rapid7 Acquires Leading Web Application Security Provider, tCell

Rich Perkett's avatar

Rich Perkett

Metasploit Wrapup: 10/12/18

Products and Tools

Metasploit Wrapup: 10/12/18

Caitlin Condon's avatar

Caitlin Condon

How to Defend Against Magecart Using CSP

Cloud and Devops Security

How to Defend Against Magecart Using CSP

Rapid7's avatar

Rapid7

Universal Event Formats Q&A: Apply User Behavior Analytics to More of Your Data

Detection and Response

Universal Event Formats Q&A: Apply User Behavior Analytics to More of Your Data

Alex Teng's avatar

Alex Teng

Patch Tuesday - October 2018

Exposure Management

Patch Tuesday - October 2018

Greg Wiseman's avatar

Greg Wiseman

Introducing Metasploit’s First Evasion Modules

Products and Tools

Introducing Metasploit’s First Evasion Modules

Rapid7's avatar

Rapid7

New Features: Rapid7 Launches Public API For InsightAppSec

Products and Tools

New Features: Rapid7 Launches Public API For InsightAppSec

Mark Hamill's avatar

Mark Hamill

Metasploit Wrapup: 10/5/18

Products and Tools

Metasploit Wrapup: 10/5/18

Jacob Robles's avatar

Jacob Robles

Security Orchestration and Automation: Not Just for Mature Organizations

Security Operations

Security Orchestration and Automation: Not Just for Mature Organizations

Jordan Ugalde's avatar

Jordan Ugalde

This One Time on a Pen Test, Part 5: From Physical Security Weakness to Strength

Exposure Management

This One Time on a Pen Test, Part 5: From Physical Security Weakness to Strength

Steve Laura's avatar

Steve Laura

Metasploit Wrapup: 9/28/18

Products and Tools

Metasploit Wrapup: 9/28/18

Erin Bleiweiss's avatar

Erin Bleiweiss

PowerShell: How to Defend Against Malicious PowerShell Attacks

Security Operations

PowerShell: How to Defend Against Malicious PowerShell Attacks

Josh Frantz's avatar

Josh Frantz

How Cybercriminals Use Pinterest to Run Fraud Scams

Vulnerabilities and Exploits

How Cybercriminals Use Pinterest to Run Fraud Scams

Orin Mor's avatar

Orin Mor

Password Tips from a Pen Tester: Are 12-Character Passwords Really Stronger, or Just a Dime a Dozen?

Exposure Management

Password Tips from a Pen Tester: Are 12-Character Passwords Really Stronger, or Just a Dime a Dozen?

Patrick Laverty's avatar

Patrick Laverty

The Newegg Breach: PCI Means Nothing to Magecart

Cloud and Devops Security

The Newegg Breach: PCI Means Nothing to Magecart

Rapid7's avatar

Rapid7

Putting Pen (Tests) to Paper: Lessons and Learnings from Rapid7’s Annual Mega-Hackathon

Exposure Management

Putting Pen (Tests) to Paper: Lessons and Learnings from Rapid7’s Annual Mega-Hackathon

Caitlin Condon's avatar

Caitlin Condon