All Articles

Weekly Metasploit Update: New Kerberos/Certificate tracing options, and multiple new modules

Spencer McIntyre

Active Exploitation of Oracle PeopleSoft Zero-Day (CVE-2026-35273)

Criminal AI-as-a-Service in 2026: How the Underground Market Is Operationalizing Cybercrime

Jeremy Makowski

Automated Threat Hunting: Turning Threat Intelligence into Executable Hunt Plans

Blake McDermott

CVE-2026-10520, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti Sentry

Patch Tuesday - June 2026

Rapid7 Gains Access To Anthropic’s Project Glasswing To Explore Frontier AI For Cybersecurity

Critical Check Point VPN Zero-Day Exploited in the Wild (CVE-2026-50751)

Weekly Metasploit Update: Apache ActiveMQ RCE, Gogs Rebase RCE, and Windows Kernel Pointer Enum

Brendan Watters

How the “Swiss Cheese” model can help you choose the right MDR provider

A Day in the Life of an MDR Analyst: Inside the Modern SOC

CVE-2026-0826: How an Old Bug Can Feed AI-Powered Impersonation

Douglas McKee, Director, Vulnerability Intelligence

CVE-2026-0826: Critical unauthenticated stack buffer overflow in HP Poly VVX and Trio VoIP Phones (FIXED)

Rapid7 and Exclusive Networks Expand Partnership Across the Nordics

Metasploit Wrap Up 05/29/2026

Spencer McIntyre

Rapid7 Observed Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)

Experts on Experts: Why Compliance is becoming Continuous

CVE-2026-52806: Authenticated RCE via Argument Injection in Gogs (FIXED as of June 7, 2026)

How Security Leaders Cut Through Complexity to Drive Better Outcomes

Metasploit Wrap Up 05/22/2026

Martin Sutovsky

Rapid7 Quarterly Threat Landscape Report: Zero-clicks, geopolitical tensions, and some wins for law enforcement

Rapid7 Intelligence