The Rapid7 Blog:
Your Signal in the Security Noise
Insights, stories, and guidance from our global security and research teams.
Featured posts
190 Results
Vulnerabilities and Exploits
MongoBleed CVE-2025-14847: Critical Memory Leak in MongoDB Allowing Attackers to Extract Sensitive Data
Rapid7
Vulnerabilities and Exploits
CVE-2025-37164: Critical unauthenticated RCE affecting Hewlett Packard Enterprise OneView
Rapid7
Vulnerabilities and Exploits
Critical vulnerabilities in Fortinet CVE-2025-59718, CVE-2025-59719, CVE-2026-24858 exploited in the wild
Rapid7
Vulnerabilities and Exploits
React2Shell (CVE-2025-55182) - Critical unauthenticated RCE affecting React Server Components
Rapid7
Vulnerabilities and Exploits
CVE-2025-64446: Critical Vulnerability in Fortinet FortiWeb Exploited in the Wild
Rapid7
Vulnerabilities and Exploits
CVE-2025-61882: Critical 0day in Oracle E-Business Suite exploited in-the-wild
Stephen Fewer, Christiaan Beek
Detection and Response
Microsoft 365 Direct Send Abuse
Rapid7
Vulnerabilities and Exploits
CVE-2025-20333, CVE-2025-20362, CVE-2025-20363 - Multiple critical vulnerabilities affecting Cisco products
Ryan Emmons
Vulnerabilities and Exploits
CVE-2025-10035 - Critical unauthenticated RCE in GoAnywhere MFT
Stephen Fewer
Detection and Response
Akira Ransomware Group Utilizing SonicWall Devices for Initial Access
Rapid7
Vulnerabilities and Exploits
CVE-2025-7775: Critical NetScaler vulnerability exploited in-the-wild
Stephen Fewer
Vulnerabilities and Exploits
CVE-2025-53770 - Zero-day exploitation in the wild of Microsoft SharePoint servers
Rapid7
Vulnerabilities and Exploits
CVE-2025-54309: CrushFTP Zero-Day Exploited in the Wild
Ryan Emmons
Vulnerabilities and Exploits
Critical Veeam Backup & Replication CVE-2025-23121
Rapid7
Vulnerabilities and Exploits
CVE-2025-6543: Zero Day Exploitation of NetScaler ADC and NetScaler Gateway
Stephen Fewer
Products and Tools
Ivanti Endpoint Manager Mobile exploit chain exploited in the wild
Ryan Emmons
Products and Tools
CVE-2025-32756 Exploited in the Wild, Affecting Multiple Fortinet Products
Stephen Fewer
Exposure Management
Active exploitation of SAP NetWeaver Visual Composer CVE-2025-31324
Caitlin Condon
Exposure Management
Ivanti Connect Secure CVE-2025-22457 exploited in the wild
Ryan Emmons
Vulnerabilities and Exploits
Multiple vulnerabilities in Ingress NGINX Controller for Kubernetes
Stephen Fewer
Exposure Management
Notable vulnerabilities in Next.js (CVE-2025-29927) and CrushFTP
Calum Hutton