The Rapid7 Blog:
Your Signal in the Security Noise

Insights, stories, and guidance from our global security and research teams.

Weekly security updates — no spam. Privacy Policy.

Mass Exploitation of Exchange Server Zero-Day CVEs: What You Need to Know

Exposure Management

Mass Exploitation of Exchange Server Zero-Day CVEs: What You Need to Know

Caitlin Condon's avatar

Caitlin Condon

Rapid7’s InsightIDR Enables Detection And Response to Microsoft Exchange Zero-Day

Exposure Management

Rapid7’s InsightIDR Enables Detection And Response to Microsoft Exchange Zero-Day

Andrew Christian's avatar

Andrew Christian

How to Achieve and Maintain Continuous Cloud Compliance

Cloud and Devops Security

How to Achieve and Maintain Continuous Cloud Compliance

Aaron Wells's avatar

Aaron Wells

Metasploit Wrap-Up: 2/26/21

Exposure Management

Metasploit Wrap-Up: 2/26/21

Jeffrey Martin's avatar

Jeffrey Martin

Celebrating Black History Today and Every Day

Rapid7 Blog

Celebrating Black History Today and Every Day

Rapid7's avatar

Rapid7

Building a Holistic VRM Strategy That Includes the Web Application Layer

Products and Tools

Building a Holistic VRM Strategy That Includes the Web Application Layer

Aaron Wells's avatar

Aaron Wells

Multiple Unauthenticated Remote Code Control and Execution Vulnerabilities in Multiple Cisco Products

Vulnerabilities and Exploits

Multiple Unauthenticated Remote Code Control and Execution Vulnerabilities in Multiple Cisco Products

boB Rudis's avatar

boB Rudis

VMware vCenter Server CVE-2021-21972 Remote Code Execution Vulnerability: What You Need to Know

Exposure Management

VMware vCenter Server CVE-2021-21972 Remote Code Execution Vulnerability: What You Need to Know

boB Rudis's avatar

boB Rudis

Software Engineering, Vulnerability and Risk Management: Revolutionizing the Security Landscape at Rapid7

Rapid7 Blog

Software Engineering, Vulnerability and Risk Management: Revolutionizing the Security Landscape at Rapid7

Rapid7's avatar

Rapid7

How to Combat Alert Fatigue With Cloud-Based SIEM Tools

Detection and Response

How to Combat Alert Fatigue With Cloud-Based SIEM Tools

Margaret Wei's avatar

Margaret Wei

Metasploit Wrap-Up: 2/19/21

Products and Tools

Metasploit Wrap-Up: 2/19/21

Adam Galway's avatar

Adam Galway

Take the Full-Stack Approach to Securing Your Modern Attack Surface

Rapid7 Blog

Take the Full-Stack Approach to Securing Your Modern Attack Surface

Aaron Wells's avatar

Aaron Wells

Securing Your Web App, One Robot at a Time

Products and Tools

Securing Your Web App, One Robot at a Time

Mark Hamill's avatar

Mark Hamill

Why More Teams are Shifting Security Analytics to the Cloud This Year

Detection and Response

Why More Teams are Shifting Security Analytics to the Cloud This Year

Margaret Wei's avatar

Margaret Wei

Monitor Google Cloud Platform (GCP) Data With InsightIDR

Detection and Response

Monitor Google Cloud Platform (GCP) Data With InsightIDR

Margaret Wei's avatar

Margaret Wei

Metasploit Wrap-Up: 2/12/21

Products and Tools

Metasploit Wrap-Up: 2/12/21

Adam Galway's avatar

Adam Galway

Talkin’ SMAC: Alert Labeling and Why It Matters

Products and Tools

Talkin’ SMAC: Alert Labeling and Why It Matters

matthew berninger's avatar

matthew berninger

New InsightVM Dashboard Helps You Discover Significant Changes in Your Environment from the Past 30 Days

Exposure Management

New InsightVM Dashboard Helps You Discover Significant Changes in Your Environment from the Past 30 Days

Dane Grace's avatar

Dane Grace

CVE-2021-22652: Advantech iView Missing Authentication RCE (FIXED)

Exposure Management

CVE-2021-22652: Advantech iView Missing Authentication RCE (FIXED)

Tod Beardsley's avatar

Tod Beardsley

SOAR Tools: What to Look for When Investing in Security Automation Tech

Security Operations

SOAR Tools: What to Look for When Investing in Security Automation Tech

Aaron Wells's avatar

Aaron Wells

Patch Tuesday - February 2021

Detection and Response

Patch Tuesday - February 2021

Greg Wiseman's avatar

Greg Wiseman