The Rapid7 Blog:
Your Signal in the Security Noise
Insights, stories, and guidance from our global security and research teams.
Featured posts
180 Results
Exposure Management
Active Exploitation of Multiple Vulnerabilities in Zimbra Collaboration Suite
Caitlin Condon
Exposure Management
Active Exploitation of Atlassian’s Questions for Confluence App CVE-2022-26138
Glenn Thorpe
Exposure Management
Exploitation of Mitel MiVoice Connect SA CVE-2022-29499
Caitlin Condon
Exposure Management
CVE-2022-27511: Citrix ADM Remote Device Takeover
Erick Galinkin
Exposure Management
Active Exploitation of Confluence CVE-2022-26134
Rapid7
Exposure Management
CVE-2022-30190: "Follina" Microsoft Support Diagnostic Tool Vulnerability
Rapid7
Exposure Management
CVE-2022-22972: Critical Authentication Bypass in VMware Workspace ONE Access, Identity Manager, and vRealize Automation
Jake Baines
Vulnerabilities and Exploits
CVE-2022-30525 (FIXED): Zyxel Firewall Unauthenticated Remote Command Injection
Jake Baines
Exposure Management
Active Exploitation of F5 BIG-IP iControl REST CVE-2022-1388
Ron Bowes
Exposure Management
Widespread Exploitation of VMware Workspace ONE Access CVE-2022-22954
Caitlin Condon
Exposure Management
Opportunistic Exploitation of WSO2 CVE-2022-29464
Jake Baines
Exposure Management
CVE-2022-28810: ManageEngine ADSelfService Plus Authenticated Command Execution (Fixed)
Jake Baines
Vulnerabilities and Exploits
Update on Spring4Shell’s Impact on Rapid7 Solutions and Systems
Rapid7
Exposure Management
Spring4Shell: Zero-Day Vulnerability in Spring Framework (CVE-2022-22965)
Rapid7
Vulnerabilities and Exploits
CVE-2022-0847: Arbitrary File Overwrite Vulnerability in Linux Kernel
Caitlin Condon
Vulnerabilities and Exploits
Russia/Ukraine Conflict: What Is Rapid7 Doing to Protect My Organization?
Rapid7
Vulnerabilities and Exploits
Staying Secure in a Global Cyber Conflict
Rapid7
Vulnerabilities and Exploits
Active Exploitation of VMware Horizon Servers
Glenn Thorpe
Vulnerabilities and Exploits
Using InsightVM to Find Apache Log4j CVE-2021-44228
Greg Wiseman
Exposure Management
Update on Log4Shell’s Impact on Rapid7 Solutions and Systems
Rapid7
Vulnerabilities and Exploits
Driver-Based Attacks: Past and Present
Jake Baines