All Articles

Patch Tuesday - September 2026

CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)

DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors

Rapid7 Intelligence

Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild

Metasploit Wrap Up: Payloads and Exploits, and Scanners, Oh my!

The Metasploit Team

PaperCut NG/MF Critical Zero-Day Exploited in the Wild

Identity-as-a-Service: Uncovering Dark Web Marketplaces Trading Executive SSNs

Alexandra Blia, Maor Weinberger

Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)

CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway

Rapid7 and Licencias OnLine Partner to Accelerate Cybersecurity Maturity across Latin America

Cássio De Alcântara

New Report: AI threats are here. Why Q2 2026 signals the end of traditional patch cycles

Rapid7 Intelligence

Operation ASTERIX: Anatomy of a Crypto Fraud Pipeline

Anna Širokova, Jan Recinsky

Africa’s Cybersecurity Challenge Is Bigger Than Access to Technology

Gopan Sivasankaran

Metasploit Wrap Up: Lot of summer shells and fit http profiles

Rapid7 Intelligence

AI is Working in the SOC. So Why are Security Executives More Worried Than Ever?

Patch Tuesday - August 2026

Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)

CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED)

Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)

CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild

Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066)