The Rapid7 Blog:
Your Signal in the Security Noise
Insights, stories, and guidance from our global security and research teams.
Featured posts
271 Results
Vulnerabilities and Exploits
CVE-2025-64446: Critical Vulnerability in Fortinet FortiWeb Exploited in the Wild
Rapid7
Vulnerabilities and Exploits
When Your Calendar Becomes the Compromise
Rapid7 Labs
Vulnerabilities and Exploits
Rapid7 at Pwn2Own: Raising the Bar in Vuln Intel
Stephen Fewer
Vulnerabilities and Exploits
Inside the F5 Breach: What We Know and Recommended Actions
Rapid7
Vulnerabilities and Exploits
CVE-2025-61882: Critical 0day in Oracle E-Business Suite exploited in-the-wild
Stephen Fewer, Christiaan Beek
Vulnerabilities and Exploits
CVE-2025-20333, CVE-2025-20362, CVE-2025-20363 - Multiple critical vulnerabilities affecting Cisco products
Ryan Emmons
Vulnerabilities and Exploits
CVE-2025-10184: OnePlus OxygenOS Telephony provider permission bypass (FIXED as of October 11, 2025)
Rapid7
Vulnerabilities and Exploits
CVE-2025-10035 - Critical unauthenticated RCE in GoAnywhere MFT
Stephen Fewer
Vulnerabilities and Exploits
Flashrom to Hexedit to Root: DEF CON 33 IoT Village Exercise
Rapid7
Vulnerabilities and Exploits
CVE-2025-7775: Critical NetScaler vulnerability exploited in-the-wild
Stephen Fewer
Vulnerabilities and Exploits
Securden Unified PAM: Multiple Critical Vulnerabilities (FIXED)
Aaron Herndon, Marcus Chang
Vulnerabilities and Exploits
PenTales: Weak passwords, Weaker MFA Protocols, and One Absent-Minded Professor
Philip Giattino
Vulnerabilities and Exploits
CVE-2025-53770 - Zero-day exploitation in the wild of Microsoft SharePoint servers
Rapid7
Vulnerabilities and Exploits
Rapid7 Named a Strong Performer in the 2025 Forrester Wave for Unified Vulnerability Management
Rapid7
Vulnerabilities and Exploits
CVE-2025-54309: CrushFTP Zero-Day Exploited in the Wild
Ryan Emmons
Vulnerabilities and Exploits
Critical Veeam Backup & Replication CVE-2025-23121
Rapid7
Vulnerabilities and Exploits
CVE-2025-4365/CVE-2024-12284: NetScaler Console/SDX Authenticated Arbitrary File Read/Write (FIXED)
Calum Hutton
Vulnerabilities and Exploits
Konica Minolta bizhub Multifunction Printer: Pass-Back Attack Vulnerability (NOT FIXED)
Deral Heiland
Vulnerabilities and Exploits
CVE-2025-6543: Zero Day Exploitation of NetScaler ADC and NetScaler Gateway
Stephen Fewer
Vulnerabilities and Exploits
CVE-2025-6759: Citrix Virtual Apps and Desktops - Local Privilege Escalation (FIXED)
Brandon Fisher
Vulnerabilities and Exploits
Coverage Plus Context Equals Intelligent Exposure Management
Joel Alcon