The Rapid7 Blog:
Your Signal in the Security Noise
Insights, stories, and guidance from our global security and research teams.
Featured posts
3723 Results

Vulnerabilities and Exploits
Trojan Source CVE-2021-42572: No Panic Necessary
boB Rudis

Threat Research
Hands-On IoT Hacking: Rapid7 at DefCon 29 IoT Village, Part 3
Deral Heiland

Security Operations
Building Threat-Informed Defenses: Rapid7 Experts Share Their Thoughts on MITRE ATT&CK
Margaret Wei

Products and Tools
InsightVM Scan Diagnostics: Troubleshooting Credential Issues for Authenticated Scanning
Greg Wiseman

Cloud and Devops Security
A Matter of Perspective: Agent-Based and Agentless Approaches to Cloud Security, Part 2
Amit Bawer

Products and Tools
Solving the Access Goldilocks Problem: RBAC for InsightAppSec Is Here
Tom Caiazza

Exposure Management
GitLab Unauthenticated Remote Code Execution CVE-2021-22205 Exploited in the Wild
Jake Baines

Exposure Management
Metasploit Wrap-Up: Oct. 29, 2021
Grant Willcox

Threat Research
Infostealer Malware Masquerades as Windows Application
Andrew Iwamaye

Detection and Response
Hands-On IoT Hacking: Rapid7 at DefCon IoT Village, Part 2
Deral Heiland

Rapid7 Blog
Rapid7 Announces Tampa Office Opening
Rapid7

Vulnerabilities and Exploits
NPM Library (ua-parser-js) Hijacked: What You Need to Know
Glenn Thorpe

Industry Trends
Recog: Data Rules Everything Around Me
Matthew Kienow

Exposure Management
2022 Planning: Designing Effective Strategies to Manage Supply Chain Risk
Jesse Mack

Exposure Management
Metasploit Wrap-Up: 10/22/21
Dean Welch

Detection and Response
Hands-On IoT Hacking: Rapid7 at DefCon IoT Village, Part 1
Deral Heiland

Products and Tools
A Matter of Perspective: Agent-Based and Agentless Approaches to Cloud Security, Part 1
Amit Bawer

Exposure Management
OWASP Top 10 Deep Dive: Injection and Stack Traces From a Hacker's Perspective
Julius Callahan

Exposure Management
Passwordless Network Scanning: Same Insights, Less Risk
Jimmy Cancilla

Exposure Management
Metasploit Wrap-Up 10/15/21
Brendan Watters

Detection and Response
4 Simple Steps for an Effective Threat Intelligence Program
Alon Arvatz