All Articles

Patch Tuesday - July 2026

CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED)

Rapid7 and Mindware Partner to Accelerate Cyber Resilience Across the Middle East

Gopan Sivasankaran

Weekly Metasploit Update: Exploits for FlowiseAI CSV Agent and MacOS Package Kit

Security Teams Are Ready To Become More Preemptive. What’s Holding Them Back?

A Day With Your Vector Command Red Team Pod

Trevor Christiansen

Weekly Metasploit Update: Modules for SMB-to-Meterpreter, Peyara Remote Mouse RCE exploit, and more

Formalizing Red Teaming Offensive Methodology as a Multi-Agent AI Architecture

5 Myths About AI in the SOC Security Teams Need to Rethink

Modernizing Global Vulnerability Standards For The Age Of AI

Weekly Metasploit Update: Modules for Audiobookshelf, LiteLLM, Next.js, Dalfox and more

Experts on Experts: Why AI and Compliance Are Forcing A New Security Operating Model

Why SIEM is Moving Toward Unified Security Operations: Rapid7 Named a Major Player in IDC MarketScape

Weekly Metasploit Update: NTLM Relay Priv Esc, MCP Server Integration, Paperclip AI RCE Chain, and more

Alan David Foster

Why Security Teams Need To Start Earlier

Malware à la Mode: Tracking Dropping Elephant Tradecraft Through a China-Themed Loader Chain

NIS2 is raising the bar. Here’s how to turn readiness into resilience.

Does Your Security Programme Align With NIS2 Requirements?

Beyond the Score: Using AI to Translate CVEs into Real-World Business Risk

Weekly Metasploit Update: New Kerberos/Certificate tracing options, and multiple new modules

Spencer McIntyre

Active Exploitation of Oracle PeopleSoft Zero-Day (CVE-2026-35273)