The Rapid7 Blog:
Your Signal in the Security Noise

Insights, stories, and guidance from our global security and research teams.

Weekly security updates — no spam. Privacy Policy.

CVE-2020-1472 "Zerologon" Critical Privilege Escalation: What You Need To Know

Vulnerabilities and Exploits

CVE-2020-1472 "Zerologon" Critical Privilege Escalation: What You Need To Know

Caitlin Condon's avatar

Caitlin Condon

Vulnerability Remediation vs. Mitigation: What’s the Difference?

Exposure Management

Vulnerability Remediation vs. Mitigation: What’s the Difference?

Tori Sitcawich's avatar

Tori Sitcawich

NICER Protocol Deep Dive: Internet Exposure of FTP/S (TCP/990)

Exposure Management

NICER Protocol Deep Dive: Internet Exposure of FTP/S (TCP/990)

Tod Beardsley's avatar

Tod Beardsley

Metasploit Wrap-Up: Sep. 11, 2020

Exposure Management

Metasploit Wrap-Up: Sep. 11, 2020

James Barnett's avatar

James Barnett

How to Track and Remediate Default Account Vulnerabilities in InsightVM

Exposure Management

How to Track and Remediate Default Account Vulnerabilities in InsightVM

Landon Dalke's avatar

Landon Dalke

This One Time on a Pen Test: I’m Calling My Lawyer!

Exposure Management

This One Time on a Pen Test: I’m Calling My Lawyer!

Jonathan Stines's avatar

Jonathan Stines

How Rapid7 Is Transforming an On-Premises SOAR Tool into a Cloud-First Automation Platform

Security Operations

How Rapid7 Is Transforming an On-Premises SOAR Tool into a Cloud-First Automation Platform

Spencer Engleson's avatar

Spencer Engleson

Patch Tuesday - September 2020

Detection and Response

Patch Tuesday - September 2020

Richard Tsang's avatar

Richard Tsang

Metasploit Wrap-Up: 9/4/20

Products and Tools

Metasploit Wrap-Up: 9/4/20

Alan David Foster's avatar

Alan David Foster

NICER Protocol Deep Dive: Internet Exposure of FTP

Threat Research

NICER Protocol Deep Dive: Internet Exposure of FTP

Tod Beardsley's avatar

Tod Beardsley

This One Time on a Pen Test: Playing Social Security Slots

Exposure Management

This One Time on a Pen Test: Playing Social Security Slots

Eric Mortaro's avatar

Eric Mortaro

Why I Joined Rapid7

Products and Tools

Why I Joined Rapid7

Jeffrey Gardner's avatar

Jeffrey Gardner

Metasploit Wrap-Up: Aug. 28, 2020

Exposure Management

Metasploit Wrap-Up: Aug. 28, 2020

Christophe De La Fuente's avatar

Christophe De La Fuente

NICER Protocol Deep Dive: Secure Shell (SSH)

Threat Research

NICER Protocol Deep Dive: Secure Shell (SSH)

Tod Beardsley's avatar

Tod Beardsley

How Three InsightVM Customers Scaled Their Vulnerability Management Programs with Rapid7

Products and Tools

How Three InsightVM Customers Scaled Their Vulnerability Management Programs with Rapid7

nicole goncalves's avatar

nicole goncalves

Internet of Things Cybersecurity Regulation and Rapid7

Detection and Response

Internet of Things Cybersecurity Regulation and Rapid7

Jen Ellis's avatar

Jen Ellis

InsightIDR Demo: Cloud-Native SIEM vs. Modern Security Challenges

Detection and Response

InsightIDR Demo: Cloud-Native SIEM vs. Modern Security Challenges

Rapid7's avatar

Rapid7

Life as a Rapid7 Rotato: Launch Your Career

Rapid7 Blog

Life as a Rapid7 Rotato: Launch Your Career

Rapid7's avatar

Rapid7

Metasploit Wrap-Up: 8/21/20

Exposure Management

Metasploit Wrap-Up: 8/21/20

Erin Bleiweiss's avatar

Erin Bleiweiss

NICER Protocol Deep Dive: Internet Exposure of Telnet Services

Threat Research

NICER Protocol Deep Dive: Internet Exposure of Telnet Services

Tod Beardsley's avatar

Tod Beardsley

Automated External Sonar Scanning Workflow with InsightVM

Exposure Management

Automated External Sonar Scanning Workflow with InsightVM

Landon Dalke's avatar

Landon Dalke