The Rapid7 Blog:
Your Signal in the Security Noise

Insights, stories, and guidance from our global security and research teams.

Weekly security updates — no spam. Privacy Policy.

Cybersecurity Analysts: Job Stress Is Bad, but Boredom Is Kryptonite

Security Operations

Cybersecurity Analysts: Job Stress Is Bad, but Boredom Is Kryptonite

Amy Hunt's avatar

Amy Hunt

Avoiding Smash and Grab Under the SEC’s Proposed Cyber Rule

Detection and Response

Avoiding Smash and Grab Under the SEC’s Proposed Cyber Rule

Harley Geiger's avatar

Harley Geiger

Network Access for Sale: Protect Your Organization Against This Growing Threat

Vulnerabilities and Exploits

Network Access for Sale: Protect Your Organization Against This Growing Threat

Jeremy Makowski's avatar

Jeremy Makowski

Metasploit Wrap-Up: 8/19/22

Exposure Management

Metasploit Wrap-Up: 8/19/22

Alan David Foster's avatar

Alan David Foster

Pushing Open-Source Security Forward: Insights From Black Hat 2022

Products and Tools

Pushing Open-Source Security Forward: Insights From Black Hat 2022

Jesse Mack's avatar

Jesse Mack

360-Degree XDR and Attack Surface Coverage With Rapid7

Products and Tools

360-Degree XDR and Attack Surface Coverage With Rapid7

Margaret Wei's avatar

Margaret Wei

Leading the Way in Tampa

Rapid7 Blog

Leading the Way in Tampa

Julian Waits's avatar

Julian Waits

Active Exploitation of Multiple Vulnerabilities in Zimbra Collaboration Suite

Exposure Management

Active Exploitation of Multiple Vulnerabilities in Zimbra Collaboration Suite

Caitlin Condon's avatar

Caitlin Condon

Are Your Apps Exposed? Know Faster With Application Discovery in InsightAppSec

Products and Tools

Are Your Apps Exposed? Know Faster With Application Discovery in InsightAppSec

Ronan McCrory's avatar

Ronan McCrory

[VIDEO] An Inside Look at Black Hat 2022 From the Rapid7 Team

Rapid7 Blog

[VIDEO] An Inside Look at Black Hat 2022 From the Rapid7 Team

Jesse Mack's avatar

Jesse Mack

Metasploit Weekly Wrap-Up: 8/12/22

Products and Tools

Metasploit Weekly Wrap-Up: 8/12/22

Jeffrey Martin's avatar

Jeffrey Martin

3 Mistakes Companies Make in Their Detection and Response Programs

Products and Tools

3 Mistakes Companies Make in Their Detection and Response Programs

Jake Godgart's avatar

Jake Godgart

Rapid7 Discovered Vulnerabilities in Cisco ASA, ASDM, and FirePOWER Services Software

Vulnerabilities and Exploits

Rapid7 Discovered Vulnerabilities in Cisco ASA, ASDM, and FirePOWER Services Software

Jake Baines's avatar

Jake Baines

OCSF: Working Together to Standardize Data

Products and Tools

OCSF: Working Together to Standardize Data

Rapid7's avatar

Rapid7

Navigating the Evolving Patchwork of Incident Reporting Requirements

Industry Trends

Navigating the Evolving Patchwork of Incident Reporting Requirements

Peter Woolverton's avatar

Peter Woolverton

Patch Tuesday - August 2022

Detection and Response

Patch Tuesday - August 2022

Greg Wiseman's avatar

Greg Wiseman

6 Reasons Managed Detection and Response Is Hitting Its Stride

Products and Tools

6 Reasons Managed Detection and Response Is Hitting Its Stride

Mikayla Wyman's avatar

Mikayla Wyman

How One Engineer Upskilled Into a Salesforce Engineering Role at Rapid7

Rapid7 Blog

How One Engineer Upskilled Into a Salesforce Engineering Role at Rapid7

Rapid7's avatar

Rapid7

No Damsels in Distress: How Media and Entertainment Companies Can Secure Data and Content

Security Operations

No Damsels in Distress: How Media and Entertainment Companies Can Secure Data and Content

Ryan Blanchard's avatar

Ryan Blanchard

Metasploit Weekly Wrap-Up: 8/5/22

Exposure Management

Metasploit Weekly Wrap-Up: 8/5/22

Shelby Pace's avatar

Shelby Pace

CVE-2022-31660 and CVE-2022-31661 (FIXED): VMware Workspace ONE Access, Identity Manager, and vRealize Automation LPE

Threat Research

CVE-2022-31660 and CVE-2022-31661 (FIXED): VMware Workspace ONE Access, Identity Manager, and vRealize Automation LPE

Spencer McIntyre's avatar

Spencer McIntyre