All Articles

Kubernetes Security Is Not Container Security

Metasploit Wrap-Up: 4/30/21

Rapid7 Analysis: CVE-2021-22893

Active Exploitation of Pulse Connect Secure Zero-Day (CVE-2021-22893)

Overview of the EU’s draft NIS 2 Directive

How to Turbocharge Your Phishing Response Plan

Insider-Assisted Attacks Prove Costly for Telecoms

Metasploit Wrap-Up: Apr. 16, 2021

Codecov Discloses Supply Chain Compromise

Patch Tuesday - April 2021

CVE-2021-26908 and CVE-2021-26909: Automox Agent Information Disclosure (FIXED)

Metasploit Wrap-Up: 4/9/21

MDR Vendor Must-Haves, Part 5: Multiple Threat Detection Methodologies, Including Deep Attacker Behavior Analysis

Attackers Targeting Fortinet Devices and SAP Applications

Kubernetes Namespaces Are Not as Secure as You Think

Rapid7 Analysis: CVE-2018-13379 Path Traversal in Fortinet FortiOS

Rapid7 Analysis: CVE-2021-21975

Rapid7 Analysis: CVE-2020-12271: Sophos XG Firewall Pre-Auth SQL Injection Vulnerability

Metasploit Wrap-Up: 3/26/21

Christopher Granleese

Rapid7 Analysis: CVE-2021-3450

Rapid7 Analysis: OpenSSL TLS Server Crash (NULL pointer dereference) — CVE-2021-3449