All Articles

Thawing Out the Chilling Effect Of DMCA Section 1201

Better Together: XDR, SOAR, Vulnerability Management, and External Threat Intelligence

Matthew Gardiner

Metasploit Wrap-Up: Nov. 12, 2021

Alan David Foster

Hands-On IoT Hacking: Rapid7 at DefCon 29 IoT Village, Part 4

Update to GLBA Security Requirements for Financial Institutions

CVE-2021-43287 Allows Pre-Authenticated Build Takeover of GoCD Pipelines

Rapid7 Analysis: Pre-Auth Takeover of Build Pipelines in GoCD (CVE-2021-43287)

Opportunistic Exploitation of Zoho ManageEngine and Sitecore CVEs

Rapid7 Analysis: CVE-2021-42237

InsightIDR Was XDR Before XDR Was Even a Thing: An Origin Story

OWASP Top 10 Deep Dive: Getting a Clear View on Vulnerable and Outdated Components

Metasploit Wrap-Up: 11/5/21

Spencer McIntyre

New NPM library hijacks (coa and rc)

Trojan Source CVE-2021-42572: No Panic Necessary

Hands-On IoT Hacking: Rapid7 at DefCon 29 IoT Village, Part 3

A Matter of Perspective: Agent-Based and Agentless Approaches to Cloud Security, Part 2

GitLab Unauthenticated Remote Code Execution CVE-2021-22205 Exploited in the Wild

Rapid7 Analysis: CVE-2021-22205

Metasploit Wrap-Up: Oct. 29, 2021

Infostealer Malware Masquerades as Windows Application

Hands-On IoT Hacking: Rapid7 at DefCon IoT Village, Part 2