All Articles

Save the Date: Rapid7’s 2026 Global Cybersecurity Summit | May 12–13

Metasploit Wrap-Up 02/27/2026

Before the Breach: When digital footprints become a strategic cyber risk

Jeremy Makowski

Critical Cisco Catalyst Vulnerability Exploited in the wild (CVE-2026-20127)

Your MRI is Online: The Hidden Risks of Exposed DICOM Servers in UK Healthcare

The Post-RAMP Era: Allegations, Fragmentation, and the Rebuilding of the Ransomware Underground

Alexandra Blia, Efi Sherman

Multi-Tenant API Access: Centralize, Scale, and Secure Your Operations

New Report: The Digital Footprints of Many Executives Can Leave Their Companies Seriously Exposed

Alert Fatigue Isn’t Going Away. Here’s How Modern SOCs Are Fighting Back

Metasploit Wrap-Up 02/20/2026

Hacktivism and the Winter Olympics 2026: What We’re Seeing and What it Signals

The Phone is Listening: A Cold War–Style Vulnerability in Modern VoIP

Douglas McKee, Director, Vulnerability Intelligence

CVE-2026-2329: Critical Unauthenticated Stack Buffer Overflow in Grandstream GXP1600 VoIP Phones (FIXED)

Building the Future of Cloud Security: Rapid7 Recognized in Cloud Native Application Protection, Q1 2026

Metasploit Wrap-Up 02/13/2026

Christopher Granleese

Carding-as-a-Service: The Underground Market of Stolen Cards

Alexandra Blia, Maor Weinberger, Gal Givon

Patch Tuesday - February 2026

Measuring AI Security: Separating Signal from Panic

Christiaan Beek

Rapid7 Analysis: CVE-2026-1731

CVE-2026-1731: Critical Unauthenticated Remote Code Execution in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

Vulnerability Found in InsightVM & Nexpose: CVE-2026-1814 (FIXED)