All Articles

What’s New in Rapid7 Products and Services: Q2 2026 in Review

From a Single Alert to 1,000 Files: Inside an Exposed WebDAV Malware Delivery Lab

Anna Širokova, Jan Recinsky

CVE-2026-63030: wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core

Metasploit Wrap Up: An HTTP to SMB relay plus Payload Improvements

Christopher Granleese

CVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the Wild

Sunsetting the Public AttackerKB Platform

Douglas McKee, Director, Vulnerability Intelligence

Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)

Investigating Persistence Mechanisms in AWS

Patch Tuesday - July 2026

CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED)

Rapid7 and Mindware Partner to Accelerate Cyber Resilience Across the Middle East

Gopan Sivasankaran

Weekly Metasploit Update: Exploits for FlowiseAI CSV Agent and MacOS Package Kit

Security Teams Are Ready To Become More Preemptive. What’s Holding Them Back?

A Day With Your Vector Command Red Team Pod

Trevor Christiansen

Weekly Metasploit Update: Modules for SMB-to-Meterpreter, Peyara Remote Mouse RCE exploit, and more

Formalizing Red Teaming Offensive Methodology as a Multi-Agent AI Architecture

5 Myths About AI in the SOC Security Teams Need to Rethink

Modernizing Global Vulnerability Standards For The Age Of AI

Weekly Metasploit Update: Modules for Audiobookshelf, LiteLLM, Next.js, Dalfox and more

Experts on Experts: Why AI and Compliance Are Forcing A New Security Operating Model

Why SIEM is Moving Toward Unified Security Operations: Rapid7 Named a Major Player in IDC MarketScape