The Rapid7 Blog:
Your Signal in the Security Noise

Insights, stories, and guidance from our global security and research teams.

Weekly security updates — no spam. Privacy Policy.

What’s New in InsightVM and Nexpose: Q2 2023 in Review

Products and Tools

What’s New in InsightVM and Nexpose: Q2 2023 in Review

Roshnee Mistry Shah's avatar

Roshnee Mistry Shah

Rapid7 Solutions for Partners

Products and Tools

Rapid7 Solutions for Partners

Tom Caiazza's avatar

Tom Caiazza

The Japanese Threat Landscape: A Report on Cyber Threats in the Third Largest Economy on Earth

Threat Research

The Japanese Threat Landscape: A Report on Cyber Threats in the Third Largest Economy on Earth

Tom Caiazza's avatar

Tom Caiazza

Standardizing SaaS Data to Drive Greater Cloud Security Efficacy

Products and Tools

Standardizing SaaS Data to Drive Greater Cloud Security Efficacy

Dina Durutlic's avatar

Dina Durutlic

Uncover and Remediate Toxic Combinations with Attack Path Analysis

Products and Tools

Uncover and Remediate Toxic Combinations with Attack Path Analysis

James Alaniz's avatar

James Alaniz

Metasploit Weekly Wrap-Up: 6/23/23

Exposure Management

Metasploit Weekly Wrap-Up: 6/23/23

Jeffrey Martin's avatar

Jeffrey Martin

Multiple Vulnerabilities in Fortra Globalscape EFT Administration Server [FIXED]

Exposure Management

Multiple Vulnerabilities in Fortra Globalscape EFT Administration Server [FIXED]

Ron Bowes's avatar

Ron Bowes

Cyber Asset Attack Surface Management 101

Detection and Response

Cyber Asset Attack Surface Management 101

Rapid7's avatar

Rapid7

Metasploit Weekly Wrap-Up: Jun. 16, 2023

Exposure Management

Metasploit Weekly Wrap-Up: Jun. 16, 2023

Alan David Foster's avatar

Alan David Foster

CVE-2023-34362: MOVEit Vulnerability Timeline of Events

Exposure Management

CVE-2023-34362: MOVEit Vulnerability Timeline of Events

Rapid7's avatar

Rapid7

Patch Tuesday - June 2023

Detection and Response

Patch Tuesday - June 2023

Adam Barnett's avatar

Adam Barnett

CVE-2023-27997: Critical Fortinet Fortigate Remote Code Execution Vulnerability

Exposure Management

CVE-2023-27997: Critical Fortinet Fortigate Remote Code Execution Vulnerability

Drew Burton's avatar

Drew Burton

Metasploit Weekly Wrap-Up: Jun. 9, 2023

Exposure Management

Metasploit Weekly Wrap-Up: Jun. 9, 2023

Brendan Watters's avatar

Brendan Watters

OWASP TOP 10 API Security Risks: 2023

Cloud and Devops Security

OWASP TOP 10 API Security Risks: 2023

Ray Cochrane's avatar

Ray Cochrane

Detect and Prioritize Identity-Related Cloud Risk with InsightCloudSec

Products and Tools

Detect and Prioritize Identity-Related Cloud Risk with InsightCloudSec

Cathal O'Neill's avatar

Cathal O'Neill

CVE-2023-2868: Total Compromise of Physical Barracuda ESG Appliances

Exposure Management

CVE-2023-2868: Total Compromise of Physical Barracuda ESG Appliances

Caitlin Condon's avatar

Caitlin Condon

Velociraptor 0.6.9 Release: Digging Even Deeper with SMB Support, Azure Storage and Lockdown Server Mode

Products and Tools

Velociraptor 0.6.9 Release: Digging Even Deeper with SMB Support, Azure Storage and Lockdown Server Mode

Mike Cohen's avatar

Mike Cohen

Metasploit Weekly Wrap-Up: Jun. 7, 2023

Exposure Management

Metasploit Weekly Wrap-Up: Jun. 7, 2023

Grant Willcox's avatar

Grant Willcox

This is Ceti Alpha Five!

Detection and Response

This is Ceti Alpha Five!

Owen Holland's avatar

Owen Holland

Metasploit Weekly Wrap-Up: 6/2/23

Exposure Management

Metasploit Weekly Wrap-Up: 6/2/23

Christopher Granleese's avatar

Christopher Granleese

Rapid7 Observed Exploitation of Critical MOVEit Transfer Vulnerability

Detection and Response

Rapid7 Observed Exploitation of Critical MOVEit Transfer Vulnerability

Caitlin Condon's avatar

Caitlin Condon