All Articles

Metasploit 2025 Annual Wrap-Up

Spencer McIntyre

What’s New in Rapid7 Products & Services: H2 2025 in Review

MongoBleed CVE-2025-14847: Critical Memory Leak in MongoDB Allowing Attackers to Extract Sensitive Data

Metasploit Wrap-Up 12/19/2025

Spencer McIntyre

Rapid7 Analysis: CVE-2025-37164

CVE-2025-37164: Critical unauthenticated RCE affecting Hewlett Packard Enterprise OneView

Critical vulnerabilities in Fortinet CVE-2025-59718, CVE-2025-59719, CVE-2026-24858 exploited in the wild

Test for React2Shell with Application Security using New Functionality

Dynamic EASM Discovery: Continuous Discovery for a Changing Attack Surface

SantaStealer is Coming to Town: A New, Ambitious Infostealer Advertised on Underground Forums

Metasploit Wrap-Up 12/12/2025

Spencer McIntyre

New Research: Multifunction Printer (MFP) Security Concerns within the Enterprise Business Environment

Deral Heiland, Sam Moses

Geopolitics and Cyber Risk: How Global Tensions Shape the Attack Surface

Jeremy Makowski

Patch Tuesday - December 2025

CVE-2025-10573: Ivanti EPM Unauthenticated Stored Cross-Site Scripting (Fixed)

Metasploit Wrap-Up 12/05/2025

Voices of the Experts: What to Expect from Our Predictions Webinar

React2Shell (CVE-2025-55182) - Critical unauthenticated RCE affecting React Server Components

From Policy to Practice: Why Cyber Resilience Needs a Reboot

Announcing Rapid7’s Next-Gen SIEM Buyer’s Guide

Rapid7 Helps Lower Your Cost to Assurance for HITRUST