The Rapid7 Blog:
Your Signal in the Security Noise

Insights, stories, and guidance from our global security and research teams.

Weekly security updates — no spam. Privacy Policy.

Metasploit Wrap-Up: Sep. 18, 2020

Exposure Management

Metasploit Wrap-Up: Sep. 18, 2020

Adam Galway's avatar

Adam Galway

NICER Protocol Deep Dive: Internet Exposure of SMB

Threat Research

NICER Protocol Deep Dive: Internet Exposure of SMB

Tod Beardsley's avatar

Tod Beardsley

A step closer to stronger federal IoT security

Industry Trends

A step closer to stronger federal IoT security

Harley Geiger's avatar

Harley Geiger

Decentralize Remediation Efforts to Gain More Efficiency with InsightVM

Exposure Management

Decentralize Remediation Efforts to Gain More Efficiency with InsightVM

Tori Sitcawich's avatar

Tori Sitcawich

This One Time on a Pen Test: How I Outwitted the Vexing VPN

Exposure Management

This One Time on a Pen Test: How I Outwitted the Vexing VPN

Robert Stewart's avatar

Robert Stewart

CVE-2020-1472 "Zerologon" Critical Privilege Escalation: What You Need To Know

Vulnerabilities and Exploits

CVE-2020-1472 "Zerologon" Critical Privilege Escalation: What You Need To Know

Caitlin Condon's avatar

Caitlin Condon

Vulnerability Remediation vs. Mitigation: What’s the Difference?

Exposure Management

Vulnerability Remediation vs. Mitigation: What’s the Difference?

Tori Sitcawich's avatar

Tori Sitcawich

NICER Protocol Deep Dive: Internet Exposure of FTP/S (TCP/990)

Exposure Management

NICER Protocol Deep Dive: Internet Exposure of FTP/S (TCP/990)

Tod Beardsley's avatar

Tod Beardsley

Metasploit Wrap-Up: Sep. 11, 2020

Exposure Management

Metasploit Wrap-Up: Sep. 11, 2020

James Barnett's avatar

James Barnett

How to Track and Remediate Default Account Vulnerabilities in InsightVM

Exposure Management

How to Track and Remediate Default Account Vulnerabilities in InsightVM

Landon Dalke's avatar

Landon Dalke

This One Time on a Pen Test: I’m Calling My Lawyer!

Exposure Management

This One Time on a Pen Test: I’m Calling My Lawyer!

Jonathan Stines's avatar

Jonathan Stines

How Rapid7 Is Transforming an On-Premises SOAR Tool into a Cloud-First Automation Platform

Security Operations

How Rapid7 Is Transforming an On-Premises SOAR Tool into a Cloud-First Automation Platform

Spencer Engleson's avatar

Spencer Engleson

Patch Tuesday - September 2020

Detection and Response

Patch Tuesday - September 2020

Richard Tsang's avatar

Richard Tsang

Metasploit Wrap-Up: 9/4/20

Products and Tools

Metasploit Wrap-Up: 9/4/20

Alan David Foster's avatar

Alan David Foster

NICER Protocol Deep Dive: Internet Exposure of FTP

Threat Research

NICER Protocol Deep Dive: Internet Exposure of FTP

Tod Beardsley's avatar

Tod Beardsley

This One Time on a Pen Test: Playing Social Security Slots

Exposure Management

This One Time on a Pen Test: Playing Social Security Slots

Eric Mortaro's avatar

Eric Mortaro

Why I Joined Rapid7

Products and Tools

Why I Joined Rapid7

Jeffrey Gardner's avatar

Jeffrey Gardner

Metasploit Wrap-Up: Aug. 28, 2020

Exposure Management

Metasploit Wrap-Up: Aug. 28, 2020

Christophe De La Fuente's avatar

Christophe De La Fuente

NICER Protocol Deep Dive: Secure Shell (SSH)

Threat Research

NICER Protocol Deep Dive: Secure Shell (SSH)

Tod Beardsley's avatar

Tod Beardsley

How Three InsightVM Customers Scaled Their Vulnerability Management Programs with Rapid7

Products and Tools

How Three InsightVM Customers Scaled Their Vulnerability Management Programs with Rapid7

nicole goncalves's avatar

nicole goncalves

Internet of Things Cybersecurity Regulation and Rapid7

Detection and Response

Internet of Things Cybersecurity Regulation and Rapid7

Jen Ellis's avatar

Jen Ellis