All Articles

Weekly Metasploit Update: NTLM Relay Priv Esc, MCP Server Integration, Paperclip AI RCE Chain, and more

Alan David Foster

Why Security Teams Need To Start Earlier

Malware à la Mode: Tracking Dropping Elephant Tradecraft Through a China-Themed Loader Chain

NIS2 is raising the bar. Here’s how to turn readiness into resilience.

Does Your Security Programme Align With NIS2 Requirements?

Beyond the Score: Using AI to Translate CVEs into Real-World Business Risk

Weekly Metasploit Update: New Kerberos/Certificate tracing options, and multiple new modules

Spencer McIntyre

Active Exploitation of Oracle PeopleSoft Zero-Day (CVE-2026-35273)

Criminal AI-as-a-Service in 2026: How the Underground Market Is Operationalizing Cybercrime

Jeremy Makowski

Automated Threat Hunting: Turning Threat Intelligence into Executable Hunt Plans

Blake McDermott

CVE-2026-10520, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti Sentry

Patch Tuesday - June 2026

Rapid7 Gains Access To Anthropic’s Project Glasswing To Explore Frontier AI For Cybersecurity

Critical Check Point VPN Zero-Day Exploited in the Wild (CVE-2026-50751)

Weekly Metasploit Update: Apache ActiveMQ RCE, Gogs Rebase RCE, and Windows Kernel Pointer Enum

Brendan Watters

How the “Swiss Cheese” model can help you choose the right MDR provider

A Day in the Life of an MDR Analyst: Inside the Modern SOC

CVE-2026-0826: How an Old Bug Can Feed AI-Powered Impersonation

Douglas McKee, Director, Vulnerability Intelligence

CVE-2026-0826: Critical unauthenticated stack buffer overflow in HP Poly VVX and Trio VoIP Phones (FIXED)

Rapid7 and Exclusive Networks Expand Partnership Across the Nordics

Metasploit Wrap Up 05/29/2026

Spencer McIntyre