The Rapid7 Blog:
Your Signal in the Security Noise

Insights, stories, and guidance from our global security and research teams.

Weekly security updates — no spam. Privacy Policy.

Heartland Dental’s Ambitions Land Them in the Cloud

Industry Trends

Heartland Dental’s Ambitions Land Them in the Cloud

Rapid7's avatar

Rapid7

There Goes The Neighborhood: Dealing With CVE-2020-16898 (and CVE-2020-1656) (aka"Bad Neighbor")

Vulnerabilities and Exploits

There Goes The Neighborhood: Dealing With CVE-2020-16898 (and CVE-2020-1656) (aka"Bad Neighbor")

boB Rudis's avatar

boB Rudis

2021 Detection and Response Planning, Part 2: Driving SOC Efficiency With a Detections-First Approach to SIEM

Products and Tools

2021 Detection and Response Planning, Part 2: Driving SOC Efficiency With a Detections-First Approach to SIEM

Meaghan Buchanan's avatar

Meaghan Buchanan

What’s New in InsightIDR: Q3 2020 in Review

Detection and Response

What’s New in InsightIDR: Q3 2020 in Review

Margaret Wei's avatar

Margaret Wei

Metasploit Wrap-Up: 10/9/20

Exposure Management

Metasploit Wrap-Up: 10/9/20

Spencer McIntyre's avatar

Spencer McIntyre

PSA: Increase in RDP Attacks Means It's Time to Mind Your RDPs and Qs

Vulnerabilities and Exploits

PSA: Increase in RDP Attacks Means It's Time to Mind Your RDPs and Qs

boB Rudis's avatar

boB Rudis

NICER Protocol Deep Dive: Internet Exposure of VNC

Exposure Management

NICER Protocol Deep Dive: Internet Exposure of VNC

Tod Beardsley's avatar

Tod Beardsley

How InsightVM Helps You Save Time and Prove Value

Exposure Management

How InsightVM Helps You Save Time and Prove Value

nicole goncalves's avatar

nicole goncalves

This One Time on a Pen Test: Doing Well With XML

Threat Research

This One Time on a Pen Test: Doing Well With XML

Tommy Dew's avatar

Tommy Dew

Easily Explore Your Log Data with a Single Query in InsightIDR

Detection and Response

Easily Explore Your Log Data with a Single Query in InsightIDR

Eoin Shanley's avatar

Eoin Shanley

Ransomware Payments and Sanctions - U.S. Treasury Advisory

Industry Trends

Ransomware Payments and Sanctions - U.S. Treasury Advisory

Harley Geiger's avatar

Harley Geiger

Why Every Organization Needs a Vulnerability Management Policy

Products and Tools

Why Every Organization Needs a Vulnerability Management Policy

Tori Sitcawich's avatar

Tori Sitcawich

Metasploit Wrap-Up: Oct. 2, 2020

Exposure Management

Metasploit Wrap-Up: Oct. 2, 2020

Louis Sato's avatar

Louis Sato

HP Device Manager Cavalcade of Critical CVEs (CVE-2020-6925:6927): What You Need to Know

Vulnerabilities and Exploits

HP Device Manager Cavalcade of Critical CVEs (CVE-2020-6925:6927): What You Need to Know

boB Rudis's avatar

boB Rudis

NICER Protocol Deep Dive: Internet Exposure of SMTP

Threat Research

NICER Protocol Deep Dive: Internet Exposure of SMTP

Tod Beardsley's avatar

Tod Beardsley

This One Time on a Pen Test: I Know...Everything

Threat Research

This One Time on a Pen Test: I Know...Everything

Shane Young's avatar

Shane Young

Rapid7 Introduces “Active Response” for End-to-End Detection and Response

Products and Tools

Rapid7 Introduces “Active Response” for End-to-End Detection and Response

Jake Godgart's avatar

Jake Godgart

Exploitability Analysis: Smash the Ref Bug Class

Threat Research

Exploitability Analysis: Smash the Ref Bug Class

Spencer McIntyre's avatar

Spencer McIntyre

Microsoft Exchange 2010 End of Support and Overall Patching Study

Exposure Management

Microsoft Exchange 2010 End of Support and Overall Patching Study

Tom Sellers's avatar

Tom Sellers

2021 Detection and Response Planning, Part 1: Rapid7’s Jeffrey Gardner Breaks Down How CISOs Should Approach Security Planning for the New Year

Products and Tools

2021 Detection and Response Planning, Part 1: Rapid7’s Jeffrey Gardner Breaks Down How CISOs Should Approach Security Planning for the New Year

Meaghan Buchanan's avatar

Meaghan Buchanan

Metasploit Wrap-up: 9/25/20

Products and Tools

Metasploit Wrap-up: 9/25/20

Brendan Watters's avatar

Brendan Watters