The Rapid7 Blog:
Your Signal in the Security Noise
Insights, stories, and guidance from our global security and research teams.
Featured posts
190 Results
Exposure Management
VMware vCenter Server CVE-2021-21972 Remote Code Execution Vulnerability: What You Need to Know
boB Rudis
Threat Research
SonicWall SNWLID-2021-0001 Zero-Day and SolarWinds’ 2021 CVE Trifecta: What You Need to Know
boB Rudis
Vulnerabilities and Exploits
State-Sponsored Threat Actors Target Security Researchers
boB Rudis
Vulnerabilities and Exploits
SolarWinds SUNBURST Backdoor Supply Chain Attack: What You Need to Know
boB Rudis
Exposure Management
VMware ESXi OpenSLP Remote Code Execution Vulnerability (CVE-2020-3992 and CVE-2019-5544): What You Need To Know
boB Rudis
Threat Research
SaltStack Pre-Authenticated Remote Root (CVE-2020-16846 and CVE-2020-25592): What You Need to Know
boB Rudis
Vulnerabilities and Exploits
Oracle WebLogic Unauthenticated Complete Takeover (CVE-2020-14882/CVE-2020-14750): What You Need to Know
boB Rudis
Vulnerabilities and Exploits
There Goes The Neighborhood: Dealing With CVE-2020-16898 (and CVE-2020-1656) (aka"Bad Neighbor")
boB Rudis
Vulnerabilities and Exploits
PSA: Increase in RDP Attacks Means It's Time to Mind Your RDPs and Qs
boB Rudis
Vulnerabilities and Exploits
HP Device Manager Cavalcade of Critical CVEs (CVE-2020-6925:6927): What You Need to Know
boB Rudis
Vulnerabilities and Exploits
CVE-2020-1472 "Zerologon" Critical Privilege Escalation: What You Need To Know
Caitlin Condon
Vulnerabilities and Exploits
Remote Code Execution Risks in Secomea, Moxa, and HMS eWon ICS VPN Vulnerabilities: What You Need to Know
boB Rudis
Vulnerabilities and Exploits
CVE-2020-3452 Cisco ASA / Firepower Read-Only Path Traversal Vulnerability: What You Need to Know
boB Rudis
Threat Research
Windows DNS Server Remote Code Execution Vulnerability (CVE-2020-1350): What You Need to Know
boB Rudis
Vulnerabilities and Exploits
CVE-2020-6287: Critical Vulnerability in SAP NetWeaver Application Server (AS) Java
Rapid7
Vulnerabilities and Exploits
CVE-2020-2021 Authentication Bypass in PAN-OS Security Assertion Markup Language (SAML) Authentication Disclosed
boB Rudis
Vulnerabilities and Exploits
CVE-2020-12271: Sophos XG Firewall Pre-Auth SQL Injection Vulnerability Remediation Guidance and Exposure Overview
boB Rudis
Threat Research
CVE-2020-0796: Microsoft SMBv3 Remote Code Execution Vulnerability Analysis
Bryce Abdo
Vulnerabilities and Exploits
Rapid7 Analysis and Guidance: CDPwn (CVE-2020-3118)
Brent Cook
Vulnerabilities and Exploits
PHP Extension and Application Repository (PEAR) Compromise: What You Need to Know
boB Rudis
Vulnerabilities and Exploits
Patching CVE-2017-7494 in Samba: It's the Circle of Life
Jen Ellis