The Rapid7 Blog:
Your Signal in the Security Noise
Insights, stories, and guidance from our global security and research teams.
Featured posts
3688 Results
Vulnerabilities and Exploits
Opportunistic Exploitation of Zoho ManageEngine and Sitecore CVEs
Caitlin Condon
Detection and Response
InsightIDR Was XDR Before XDR Was Even a Thing: An Origin Story
Sam Adams
Cloud and Devops Security
OWASP Top 10 Deep Dive: Getting a Clear View on Vulnerable and Outdated Components
Amukta Nayak
Exposure Management
Metasploit Wrap-Up: 11/5/21
Spencer McIntyre
Vulnerabilities and Exploits
New NPM library hijacks (coa and rc)
Caitlin Condon
Security Operations
2022 Planning: The Path to Effective Cybersecurity Maturity
Jesse Mack
Vulnerabilities and Exploits
Trojan Source CVE-2021-42572: No Panic Necessary
boB Rudis
Threat Research
Hands-On IoT Hacking: Rapid7 at DefCon 29 IoT Village, Part 3
Deral Heiland
Security Operations
Building Threat-Informed Defenses: Rapid7 Experts Share Their Thoughts on MITRE ATT&CK
Margaret Wei
Products and Tools
InsightVM Scan Diagnostics: Troubleshooting Credential Issues for Authenticated Scanning
Greg Wiseman
Cloud and Devops Security
A Matter of Perspective: Agent-Based and Agentless Approaches to Cloud Security, Part 2
Amit Bawer
Products and Tools
Solving the Access Goldilocks Problem: RBAC for InsightAppSec Is Here
Tom Caiazza
Exposure Management
GitLab Unauthenticated Remote Code Execution CVE-2021-22205 Exploited in the Wild
Jake Baines
Exposure Management
Metasploit Wrap-Up: Oct. 29, 2021
Grant Willcox
Threat Research
Infostealer Malware Masquerades as Windows Application
Andrew Iwamaye
Detection and Response
Hands-On IoT Hacking: Rapid7 at DefCon IoT Village, Part 2
Deral Heiland
Rapid7 Blog
Rapid7 Announces Tampa Office Opening
Rapid7
Vulnerabilities and Exploits
NPM Library (ua-parser-js) Hijacked: What You Need to Know
Glenn Thorpe
Industry Trends
Recog: Data Rules Everything Around Me
Matthew Kienow
Exposure Management
2022 Planning: Designing Effective Strategies to Manage Supply Chain Risk
Jesse Mack
Exposure Management
Metasploit Wrap-Up: 10/22/21
Dean Welch