The Rapid7 Blog:
Your Signal in the Security Noise

Insights, stories, and guidance from our global security and research teams.

Weekly security updates — no spam. Privacy Policy.

[The Lost Bots] Episode 3: Stories From the SOC

Detection and Response

[The Lost Bots] Episode 3: Stories From the SOC

Rapid7's avatar

Rapid7

Metasploit Wrap-Up: 8/13/21

Exposure Management

Metasploit Wrap-Up: 8/13/21

Erin Bleiweiss's avatar

Erin Bleiweiss

When One Door Opens, Keep It Open: A New Tool for Physical Security Testing

Exposure Management

When One Door Opens, Keep It Open: A New Tool for Physical Security Testing

Ted Raffle's avatar

Ted Raffle

Energize Your Incident Response and Vulnerability Management With Crowdsourced Automation Workflows

Security Operations

Energize Your Incident Response and Vulnerability Management With Crowdsourced Automation Workflows

Matthew Gardiner's avatar

Matthew Gardiner

ProxyShell: More Widespread Exploitation of Microsoft Exchange Servers

Exposure Management

ProxyShell: More Widespread Exploitation of Microsoft Exchange Servers

Caitlin Condon's avatar

Caitlin Condon

Popular Attack Surfaces, August 2021: What You Need to Know

Exposure Management

Popular Attack Surfaces, August 2021: What You Need to Know

Glenn Thorpe's avatar

Glenn Thorpe

Reforming the UK’s Computer Misuse Act

Industry Trends

Reforming the UK’s Computer Misuse Act

Jen Ellis's avatar

Jen Ellis

Cloud Security Glossary: Key Terms and Definitions

Industry Trends

Cloud Security Glossary: Key Terms and Definitions

Shelby Matthews's avatar

Shelby Matthews

Patch Tuesday - August 2021

Exposure Management

Patch Tuesday - August 2021

Adam Bunn's avatar

Adam Bunn

Hack Back Is Still Wack

Exposure Management

Hack Back Is Still Wack

Jen Ellis's avatar

Jen Ellis

Metasploit Wrap-Up 8/6/21

Threat Research

Metasploit Wrap-Up 8/6/21

Matthew Kienow's avatar

Matthew Kienow

Black Hat 2021: Rapid7 Experts Share Key Day 2 Takeaways

Rapid7 Blog

Black Hat 2021: Rapid7 Experts Share Key Day 2 Takeaways

Aaron Wells's avatar

Aaron Wells

Slot Machines and Cybercrime: Why Ransomware Won't Quit Pulling Our Lever

Detection and Response

Slot Machines and Cybercrime: Why Ransomware Won't Quit Pulling Our Lever

Erick Galinkin's avatar

Erick Galinkin

Black Hat 2021: Rapid7 Experts Share Key Day 1 Takeaways

Rapid7 Blog

Black Hat 2021: Rapid7 Experts Share Key Day 1 Takeaways

Aaron Wells's avatar

Aaron Wells

PetitPotam: Novel Attack Chain Can Fully Compromise Windows Domains

Exposure Management

PetitPotam: Novel Attack Chain Can Fully Compromise Windows Domains

Caitlin Condon's avatar

Caitlin Condon

The Ransomware Task Force: A New Approach to Fighting Ransomware

Exposure Management

The Ransomware Task Force: A New Approach to Fighting Ransomware

Jen Ellis's avatar

Jen Ellis

[The Lost Bots] Episode 2: Extended Detection and Response (XDR)

Detection and Response

[The Lost Bots] Episode 2: Extended Detection and Response (XDR)

Rapid7's avatar

Rapid7

3 Steps to Integrate Rapid7 Products Into the DevSecOps Cycle

Products and Tools

3 Steps to Integrate Rapid7 Products Into the DevSecOps Cycle

Arvind Vishwakarma's avatar

Arvind Vishwakarma

Metasploit Wrap-Up: 7/30/21

Products and Tools

Metasploit Wrap-Up: 7/30/21

Christophe De La Fuente's avatar

Christophe De La Fuente

Multiple Open Source Web App Vulnerabilities Fixed

Products and Tools

Multiple Open Source Web App Vulnerabilities Fixed

Tod Beardsley's avatar

Tod Beardsley

Decrypter FOMO No Mo’: Five Years of the No More Ransom Project

Industry Trends

Decrypter FOMO No Mo’: Five Years of the No More Ransom Project

Jen Ellis's avatar

Jen Ellis