The Rapid7 Blog:
Your Signal in the Security Noise

Insights, stories, and guidance from our global security and research teams.

Weekly security updates — no spam. Privacy Policy.

Patch Tuesday - July 2022

Detection and Response

Patch Tuesday - July 2022

Greg Wiseman's avatar

Greg Wiseman

The Forecast Is Flipped: Flipping L&D to Ensure Continuous Growth

Culture

The Forecast Is Flipped: Flipping L&D to Ensure Continuous Growth

Courtney Campbell's avatar

Courtney Campbell

3 Key Challenges for Cloud Identity and Access Management

Security Operations

3 Key Challenges for Cloud Identity and Access Management

Jesse Mack's avatar

Jesse Mack

Rapid7 MDR Reduced Breaches by 90% via Greater Efficiency to Detect, Investigate, Respond to, and Remediate Breaches

Products and Tools

Rapid7 MDR Reduced Breaches by 90% via Greater Efficiency to Detect, Investigate, Respond to, and Remediate Breaches

Jake Godgart's avatar

Jake Godgart

Metasploit Weekly Wrap-Up: 7/8/22

Exposure Management

Metasploit Weekly Wrap-Up: 7/8/22

Dean Welch's avatar

Dean Welch

Today’s SOC Strategies Will Soon Be Inadequate

Security Operations

Today’s SOC Strategies Will Soon Be Inadequate

Dina Durutlic's avatar

Dina Durutlic

How to Build and Enable a Cyber Target Operating Model

Exposure Management

How to Build and Enable a Cyber Target Operating Model

Rapid7's avatar

Rapid7

Exploitation of Mitel MiVoice Connect SA CVE-2022-29499

Exposure Management

Exploitation of Mitel MiVoice Connect SA CVE-2022-29499

Caitlin Condon's avatar

Caitlin Condon

For Finserv Ransomware Attacks, Obtaining Customer Data Is the Focus

Industry Trends

For Finserv Ransomware Attacks, Obtaining Customer Data Is the Focus

Tom Caiazza's avatar

Tom Caiazza

What's New in InsightIDR: Q2 2022 in Review

Products and Tools

What's New in InsightIDR: Q2 2022 in Review

Margaret Wei's avatar

Margaret Wei

Cloud Complexity Requires a Unified Approach to Assessing Risk

Products and Tools

Cloud Complexity Requires a Unified Approach to Assessing Risk

Shalini Subbiah's avatar

Shalini Subbiah

Metasploit Weekly Wrap-Up: Jul. 1, 2022

Exposure Management

Metasploit Weekly Wrap-Up: Jul. 1, 2022

Grant Willcox's avatar

Grant Willcox

Rapid7 Belfast Recognized for “Company Connection” During COVID-19 Pandemic

Rapid7 Blog

Rapid7 Belfast Recognized for “Company Connection” During COVID-19 Pandemic

Rapid7's avatar

Rapid7

[The Lost Bots] Season 2, Episode 1: SIEM Deployment in 10 Minutes

Detection and Response

[The Lost Bots] Season 2, Episode 1: SIEM Deployment in 10 Minutes

Rapid7's avatar

Rapid7

Application Security in 2022: Where Are We Now?

Cloud and Devops Security

Application Security in 2022: Where Are We Now?

Bria Grangard's avatar

Bria Grangard

For Ransomware Double-Extorters, It's All About the Benjamins — and Data From Healthcare and Pharma

Exposure Management

For Ransomware Double-Extorters, It's All About the Benjamins — and Data From Healthcare and Pharma

Tom Caiazza's avatar

Tom Caiazza

CVE-2021-3779: Ruby-MySQL Gem Client File Read (FIXED)

Exposure Management

CVE-2021-3779: Ruby-MySQL Gem Client File Read (FIXED)

Tod Beardsley's avatar

Tod Beardsley

API Security: Best Practices for a Changing Attack Surface

Cloud and Devops Security

API Security: Best Practices for a Changing Attack Surface

Ray Cochrane's avatar

Ray Cochrane

Metasploit Weekly Wrap-Up: 6/24/22

Exposure Management

Metasploit Weekly Wrap-Up: 6/24/22

Erran Carey's avatar

Erran Carey

Velociraptor Version 0.6.5: Table Transformations, Multi-Lingual Support, and Better VQL Error-Handling Let You Dig Deeper Than Ever

Detection and Response

Velociraptor Version 0.6.5: Table Transformations, Multi-Lingual Support, and Better VQL Error-Handling Let You Dig Deeper Than Ever

Carlos Canto's avatar

Carlos Canto

CVE-2022-31749: WatchGuard Authenticated Arbitrary File Read/Write (Fixed)

Exposure Management

CVE-2022-31749: WatchGuard Authenticated Arbitrary File Read/Write (Fixed)

Jake Baines's avatar

Jake Baines