All Articles

Inside Russian Market: Uncovering the Botnet Empire

Alexandra Blia, Maor Weinberger

Crimson Collective: A New Threat Group Observed Operating in the Cloud

The Business of Cybercrime: Raj Samani on Access, Ransomware, and What Comes Next

What Recent Cyber Attacks Reveal About Readiness in 2025

CVE-2025-61882: Critical 0day in Oracle E-Business Suite exploited in-the-wild

Stephen Fewer, Christiaan Beek

Rapid7 Analysis: CVE-2025-20362

Metasploit Wrap-Up 10/03/2025

Christophe De La Fuente

Microsoft 365 Direct Send Abuse

Rapid7 Extends Command Platform Capability with Middle East Region Launch

Microsoft SharePoint Zero-Day Exploitation: What Public Sector Leaders Should Know

Metasploit Wrap-Up 09/26/2025

Christopher Granleese

CVE-2025-20333, CVE-2025-20362, CVE-2025-20363 - Multiple critical vulnerabilities affecting Cisco products

Rapid7 Analysis: CVE-2025-10035

CVE-2025-10184: OnePlus OxygenOS Telephony provider permission bypass (FIXED as of October 11, 2025)

Metasploit Weekly Wrap-Up 09/19/2025

Spencer McIntyre

CVE-2025-10035 - Critical unauthenticated RCE in GoAnywhere MFT

Rapid7 and Amazon Nova Are Revolutionizing AI in Cybersecurity

Staying Ahead of Attackers: What SOC Teams Are Doing Differently in 2025

Metasploit Wrap-Up 09/12/25

Rapid7 Q2 2025 Incident Response Findings

Akira Ransomware Group Utilizing SonicWall Devices for Initial Access