The Rapid7 Blog:
Your Signal in the Security Noise
Insights, stories, and guidance from our global security and research teams.
Featured posts
190 Results
Exposure Management
CVE-2024-3400: Critical Command Injection Vulnerability in Palo Alto Networks Firewalls
Caitlin Condon
Vulnerabilities and Exploits
Backdoored XZ Utils (CVE-2024-3094)
Rapid7
Threat Research
CVE-2024-27198 and CVE-2024-27199: JetBrains TeamCity Multiple Authentication Bypass Vulnerabilities (FIXED)
Rapid7
Threat Research
High-Risk Vulnerabilities in ConnectWise ScreenConnect
Rapid7
Threat Research
RCE to Sliver: IR Tales from the Field
Noah Hemker
Threat Research
Critical Fortinet FortiOS CVE-2024-21762 Exploited
Rapid7
Threat Research
CVE-2024-0204: Critical Authentication Bypass in Fortra GoAnywhere MFT
Caitlin Condon
Threat Research
Critical CVEs in Outdated Versions of Atlassian Confluence and VMware vCenter Server
Rapid7
Threat Research
Zero-Day Exploitation of Ivanti Connect Secure and Policy Secure Gateways
Caitlin Condon
Vulnerabilities and Exploits
CVE-2023-49103 - Critical Information Disclosure in ownCloud Graph API
Stephen Fewer
Vulnerabilities and Exploits
CVE-2023-47246: SysAid Zero-Day Vulnerability Exploited By Lace Tempest
Caitlin Condon
Vulnerabilities and Exploits
Rapid7-Observed Exploitation of Atlassian Confluence CVE-2023-22518
Rapid7
Vulnerabilities and Exploits
Suspected Exploitation of Apache ActiveMQ CVE-2023-46604
Rapid7
Vulnerabilities and Exploits
CVE-2023-4966: Exploitation of Citrix NetScaler Information Disclosure Vulnerability
Rapid7
Vulnerabilities and Exploits
CVE-2023-20198: Active Exploitation of Cisco IOS XE Zero-Day Vulnerability
Caitlin Condon
Vulnerabilities and Exploits
CVE-2023-22515: Zero-Day Privilege Escalation in Confluence Server and Data Center
Caitlin Condon
Threat Research
Critical Vulnerabilities in WS_FTP Server
Caitlin Condon
Exposure Management
Exploitation of Juniper Networks SRX Series and EX Series Devices
Ron Bowes
Detection and Response
Under Siege: Rapid7-Observed Exploitation of Cisco ASA SSL VPNs
Rapid7
Threat Research
CVE-2023-35078: Critical API Access Vulnerability in Ivanti Endpoint Manager Mobile
Drew Burton
Exposure Management
Critical Zero-Day Vulnerability in Citrix NetScaler ADC and NetScaler Gateway
Caitlin Condon