The Rapid7 Blog:
Your Signal in the Security Noise

Insights, stories, and guidance from our global security and research teams.

Weekly security updates — no spam. Privacy Policy.

Announcing Microsoft Azure Asset Discovery in InsightVM

Cloud and Devops Security

Announcing Microsoft Azure Asset Discovery in InsightVM

Ken Mizota's avatar

Ken Mizota

Rapid7 issues comments on NAFTA renegotiation

Industry Trends

Rapid7 issues comments on NAFTA renegotiation

Harley Geiger's avatar

Harley Geiger

What Is User Enumeration?

Cloud and Devops Security

What Is User Enumeration?

Patrick Laverty's avatar

Patrick Laverty

R7-2017-16 | CVE-2017-5244: Lack of CSRF protection for stopping tasks in Metasploit Pro, Express, and Community editions (FIXED)

Vulnerabilities and Exploits

R7-2017-16 | CVE-2017-5244: Lack of CSRF protection for stopping tasks in Metasploit Pro, Express, and Community editions (FIXED)

Sam Huckins's avatar

Sam Huckins

Patch Tuesday - June 2017

Detection and Response

Patch Tuesday - June 2017

Greg Wiseman's avatar

Greg Wiseman

Will Investing in Security Orchestration Make Your SIEM Obsolete?

Products and Tools

Will Investing in Security Orchestration Make Your SIEM Obsolete?

Rapid7's avatar

Rapid7

Live Threat-Driven Vulnerability Prioritization

Exposure Management

Live Threat-Driven Vulnerability Prioritization

Jane Man's avatar

Jane Man

Wanna see WannaCry vulns in Splunk?

Products and Tools

Wanna see WannaCry vulns in Splunk?

Jonathan Stewart's avatar

Jonathan Stewart

The CIS Critical Controls Explained- Control 8: Malware Defenses

Exposure Management

The CIS Critical Controls Explained- Control 8: Malware Defenses

Caspian Kilkelly's avatar

Caspian Kilkelly

Metasploit Wrapup 6/2/17

Exposure Management

Metasploit Wrapup 6/2/17

Brendan Watters's avatar

Brendan Watters

DevOps: Vagrant with AWS EC2 & Digital Ocean

Cloud and Devops Security

DevOps: Vagrant with AWS EC2 & Digital Ocean

Rapid7's avatar

Rapid7

How to Combine D3 with AngularJS

Products and Tools

How to Combine D3 with AngularJS

Rapid7's avatar

Rapid7

Security Orchestration Myths: Have You Heard These?

Security Operations

Security Orchestration Myths: Have You Heard These?

Rapid7's avatar

Rapid7

R7-2017-13 | CVE-2017-5243: Nexpose Hardware Appliance SSH Enabled Obsolete Algorithms

Vulnerabilities and Exploits

R7-2017-13 | CVE-2017-5243: Nexpose Hardware Appliance SSH Enabled Obsolete Algorithms

Sam Huckins's avatar

Sam Huckins

R7-2017-05 | CVE-2017-3211: Centire Yopify Information Disclosure

Vulnerabilities and Exploits

R7-2017-05 | CVE-2017-3211: Centire Yopify Information Disclosure

Sam Huckins's avatar

Sam Huckins

ISO/IEC 27035-2 Review (cont.) - Incident Classification and Legal/Regulatory Aspects

Products and Tools

ISO/IEC 27035-2 Review (cont.) - Incident Classification and Legal/Regulatory Aspects

Rapid7's avatar

Rapid7

InsightVM/Nexpose Patch Tuesday Reporting

Products and Tools

InsightVM/Nexpose Patch Tuesday Reporting

Tyler Schmidtke's avatar

Tyler Schmidtke

Metasploit Wrapup 5/26/17

Rapid7 Blog

Metasploit Wrapup 5/26/17

Egypt's avatar

Egypt

Patching CVE-2017-7494 in Samba: It's the Circle of Life

Vulnerabilities and Exploits

Patching CVE-2017-7494 in Samba: It's the Circle of Life

Jen Ellis's avatar

Jen Ellis

Samba CVE-2017-7494: Scanning and Remediating in InsightVM and Nexpose

Products and Tools

Samba CVE-2017-7494: Scanning and Remediating in InsightVM and Nexpose

Nathan Palanov's avatar

Nathan Palanov

Announcing Chatbot Response Prompts

Security Operations

Announcing Chatbot Response Prompts

Rapid7's avatar

Rapid7