The Rapid7 Blog:
Your Signal in the Security Noise
Insights, stories, and guidance from our global security and research teams.
Featured posts
265 Results
Vulnerabilities and Exploits
CVE-2025-10184: OnePlus OxygenOS Telephony provider permission bypass (FIXED as of October 11, 2025)
Rapid7
Vulnerabilities and Exploits
CVE-2025-10035 - Critical unauthenticated RCE in GoAnywhere MFT
Stephen Fewer
Vulnerabilities and Exploits
Flashrom to Hexedit to Root: DEF CON 33 IoT Village Exercise
Rapid7
Vulnerabilities and Exploits
CVE-2025-7775: Critical NetScaler vulnerability exploited in-the-wild
Stephen Fewer
Vulnerabilities and Exploits
Securden Unified PAM: Multiple Critical Vulnerabilities (FIXED)
Aaron Herndon, Marcus Chang
Vulnerabilities and Exploits
PenTales: Weak passwords, Weaker MFA Protocols, and One Absent-Minded Professor
Philip Giattino
Vulnerabilities and Exploits
CVE-2025-53770 - Zero-day exploitation in the wild of Microsoft SharePoint servers
Rapid7
Vulnerabilities and Exploits
Rapid7 Named a Strong Performer in the 2025 Forrester Wave for Unified Vulnerability Management
Rapid7
Vulnerabilities and Exploits
CVE-2025-54309: CrushFTP Zero-Day Exploited in the Wild
Ryan Emmons
Vulnerabilities and Exploits
Critical Veeam Backup & Replication CVE-2025-23121
Rapid7
Vulnerabilities and Exploits
CVE-2025-4365/CVE-2024-12284: NetScaler Console/SDX Authenticated Arbitrary File Read/Write (FIXED)
Calum Hutton
Vulnerabilities and Exploits
Konica Minolta bizhub Multifunction Printer: Pass-Back Attack Vulnerability (NOT FIXED)
Deral Heiland
Vulnerabilities and Exploits
CVE-2025-6543: Zero Day Exploitation of NetScaler ADC and NetScaler Gateway
Stephen Fewer
Vulnerabilities and Exploits
CVE-2025-6759: Citrix Virtual Apps and Desktops - Local Privilege Escalation (FIXED)
Brandon Fisher
Vulnerabilities and Exploits
Coverage Plus Context Equals Intelligent Exposure Management
Joel Alcon
Vulnerabilities and Exploits
Multiple Brother Devices: Multiple Vulnerabilities (FIXED)
Stephen Fewer
Vulnerabilities and Exploits
BlackSuit Continues Social Engineering Attacks in Wake of Black Basta’s Internal Conflict
Tyler McGraw
Vulnerabilities and Exploits
CVE-2025-48045, CVE-2025-48046, CVE-2025-48047: MICI NetFax Server Product Vulnerabilities (NOT FIXED)
Anna Katarina Quinn
Vulnerabilities and Exploits
NSIS Abuse and sRDI Shellcode: Anatomy of the Winos 4.0 Campaign
Anna Širokova, Ivan Feigl
Vulnerabilities and Exploits
Multiple vulnerabilities in Ingress NGINX Controller for Kubernetes
Stephen Fewer
Vulnerabilities and Exploits
Xerox Versalink C7025 Multifunction Printer: Pass-Back Attack Vulnerabilities (FIXED)
Deral Heiland