The Rapid7 Blog:
Your Signal in the Security Noise

Insights, stories, and guidance from our global security and research teams.

Weekly security updates — no spam. Privacy Policy.

Easier URI Targeting With Metasploit Framework

Products and Tools

Easier URI Targeting With Metasploit Framework

Alan David Foster's avatar

Alan David Foster

Rapid7 Technical Support: Building a Career Path With Endless Possibilities

Rapid7 Blog

Rapid7 Technical Support: Building a Career Path With Endless Possibilities

Rapid7's avatar

Rapid7

Critical vCenter Server File Upload Vulnerability (CVE-2021-22005)

Exposure Management

Critical vCenter Server File Upload Vulnerability (CVE-2021-22005)

Glenn Thorpe's avatar

Glenn Thorpe

Rapid7 Statement on the New Standard Contractual Clauses for International Transfers of Personal Data

Industry Trends

Rapid7 Statement on the New Standard Contractual Clauses for International Transfers of Personal Data

Chelsea Portney's avatar

Chelsea Portney

Login Authentication Goes Automated With New InsightAppSec Improvements

Products and Tools

Login Authentication Goes Automated With New InsightAppSec Improvements

Adrian Stewart's avatar

Adrian Stewart

Metasploit Wrap-Up: 9/17/21

Products and Tools

Metasploit Wrap-Up: 9/17/21

Brendan Watters's avatar

Brendan Watters

SANS 2021 Threat Hunting Survey: How Organizations' Security Postures Have Evolved in the New Normal

Threat Research

SANS 2021 Threat Hunting Survey: How Organizations' Security Postures Have Evolved in the New Normal

Margaret Wei's avatar

Margaret Wei

The Ransomware Killchain

Industry Trends

The Ransomware Killchain

Erick Galinkin's avatar

Erick Galinkin

OMIGOD: How to Automatically Detect and Fix Microsoft Azure’s New OMI Vulnerability

Exposure Management

OMIGOD: How to Automatically Detect and Fix Microsoft Azure’s New OMI Vulnerability

Chris DeRamus's avatar

Chris DeRamus

Patch Tuesday - September 2021

Exposure Management

Patch Tuesday - September 2021

Adam Bunn's avatar

Adam Bunn

Metasploit Wrap-Up: 9/10/21

Threat Research

Metasploit Wrap-Up: 9/10/21

Louis Sato's avatar

Louis Sato

The Rise of Disruptive Ransomware Attacks: A Call To Action

Industry Trends

The Rise of Disruptive Ransomware Attacks: A Call To Action

boB Rudis's avatar

boB Rudis

Cloud Challenges in the Age of Remote Work: Rapid7’s 2021 Cloud Misconfigurations Report

Threat Research

Cloud Challenges in the Age of Remote Work: Rapid7’s 2021 Cloud Misconfigurations Report

Shelby Matthews's avatar

Shelby Matthews

Security at Scale in the Open-Source Supply Chain

Exposure Management

Security at Scale in the Open-Source Supply Chain

Aaron Wells's avatar

Aaron Wells

CVE-2021-3546[78]: Akkadian Console Server Vulnerabilities (FIXED)

Vulnerabilities and Exploits

CVE-2021-3546[78]: Akkadian Console Server Vulnerabilities (FIXED)

Tod Beardsley's avatar

Tod Beardsley

Metasploit Wrap-Up: 9/3/21

Products and Tools

Metasploit Wrap-Up: 9/3/21

Christophe De La Fuente's avatar

Christophe De La Fuente

Cybersecurity as Digital Detective Work: DFIR and Its 3 Key Components

Detection and Response

Cybersecurity as Digital Detective Work: DFIR and Its 3 Key Components

Jesse Mack's avatar

Jesse Mack

Active Exploitation of Confluence Server & Confluence Data Center: CVE-2021-26084

Exposure Management

Active Exploitation of Confluence Server & Confluence Data Center: CVE-2021-26084

Caitlin Condon's avatar

Caitlin Condon

SANS Experts: 4 Emerging Enterprise Attack Techniques

Threat Research

SANS Experts: 4 Emerging Enterprise Attack Techniques

Aaron Wells's avatar

Aaron Wells

New Rapid7 MDR Essentials Capability Sees What Attackers See: “It’s Eye-Opening”

Products and Tools

New Rapid7 MDR Essentials Capability Sees What Attackers See: “It’s Eye-Opening”

Jake Godgart's avatar

Jake Godgart

Cybersecurity in the Infrastructure Bill

Industry Trends

Cybersecurity in the Infrastructure Bill

Harley Geiger's avatar

Harley Geiger