The Rapid7 Blog:
Your Signal in the Security Noise

Insights, stories, and guidance from our global security and research teams.

Weekly security updates — no spam. Privacy Policy.

CVE-2023-27997: Critical Fortinet Fortigate Remote Code Execution Vulnerability

Exposure Management

CVE-2023-27997: Critical Fortinet Fortigate Remote Code Execution Vulnerability

Drew Burton's avatar

Drew Burton

Metasploit Weekly Wrap-Up: Jun. 9, 2023

Exposure Management

Metasploit Weekly Wrap-Up: Jun. 9, 2023

Brendan Watters's avatar

Brendan Watters

OWASP TOP 10 API Security Risks: 2023

Cloud and Devops Security

OWASP TOP 10 API Security Risks: 2023

Ray Cochrane's avatar

Ray Cochrane

Detect and Prioritize Identity-Related Cloud Risk with InsightCloudSec

Products and Tools

Detect and Prioritize Identity-Related Cloud Risk with InsightCloudSec

Cathal O'Neill's avatar

Cathal O'Neill

CVE-2023-2868: Total Compromise of Physical Barracuda ESG Appliances

Exposure Management

CVE-2023-2868: Total Compromise of Physical Barracuda ESG Appliances

Caitlin Condon's avatar

Caitlin Condon

Velociraptor 0.6.9 Release: Digging Even Deeper with SMB Support, Azure Storage and Lockdown Server Mode

Products and Tools

Velociraptor 0.6.9 Release: Digging Even Deeper with SMB Support, Azure Storage and Lockdown Server Mode

Mike Cohen's avatar

Mike Cohen

Metasploit Weekly Wrap-Up: Jun. 7, 2023

Exposure Management

Metasploit Weekly Wrap-Up: Jun. 7, 2023

Grant Willcox's avatar

Grant Willcox

This is Ceti Alpha Five!

Detection and Response

This is Ceti Alpha Five!

Owen Holland's avatar

Owen Holland

Metasploit Weekly Wrap-Up: 6/2/23

Exposure Management

Metasploit Weekly Wrap-Up: 6/2/23

Christopher Granleese's avatar

Christopher Granleese

Rapid7 Observed Exploitation of Critical MOVEit Transfer Vulnerability

Detection and Response

Rapid7 Observed Exploitation of Critical MOVEit Transfer Vulnerability

Caitlin Condon's avatar

Caitlin Condon

Rapid7 Sales Director Devin Poulter On Building a Career as an Account Executive

Rapid7 Blog

Rapid7 Sales Director Devin Poulter On Building a Career as an Account Executive

Rapid7's avatar

Rapid7

Rapid7 Data Engineers Inspire Future Tech Talent at Summer Search Career Fest

Rapid7 Blog

Rapid7 Data Engineers Inspire Future Tech Talent at Summer Search Career Fest

Rapid7's avatar

Rapid7

Widespread Exploitation of Zyxel Network Devices

Vulnerabilities and Exploits

Widespread Exploitation of Zyxel Network Devices

Drew Burton's avatar

Drew Burton

Fetch Payloads: A Shorter Path from Command Injection to Metasploit Session

Exposure Management

Fetch Payloads: A Shorter Path from Command Injection to Metasploit Session

Brendan Watters's avatar

Brendan Watters

Healthcare Orgs: Do You Need an Outsourced SOC?

Detection and Response

Healthcare Orgs: Do You Need an Outsourced SOC?

Rapid7's avatar

Rapid7

VeloCON 2023: Submissions Wanted!

Products and Tools

VeloCON 2023: Submissions Wanted!

Carlos Canto's avatar

Carlos Canto

Casting a Light on Shadow IT in Cloud Environments

Cloud and Devops Security

Casting a Light on Shadow IT in Cloud Environments

Ryan Blanchard's avatar

Ryan Blanchard

Metasploit Weekly Wrap-Up: 5/19/23

Exposure Management

Metasploit Weekly Wrap-Up: 5/19/23

Zachary Goldman's avatar

Zachary Goldman

Introducing: ‘Saved Filters’ in InsightCloudSec

Products and Tools

Introducing: ‘Saved Filters’ in InsightCloudSec

Shalini Subbiah's avatar

Shalini Subbiah

Rapid7 Recognized as a Strong Performer in The Forrester Wave™ for MDR, Q2 2023

Threat Research

Rapid7 Recognized as a Strong Performer in The Forrester Wave™ for MDR, Q2 2023

Jeremiah Dewey's avatar

Jeremiah Dewey

CVE-2023-27350: Ongoing Exploitation of PaperCut Remote Code Execution Vulnerability

Vulnerabilities and Exploits

CVE-2023-27350: Ongoing Exploitation of PaperCut Remote Code Execution Vulnerability

Drew Burton's avatar

Drew Burton