Detection and Response

Zero Chaos: Scaling Detection Engineering at the Speed of Software, with Detection As Code

Zachary Zeid, James Gallahan

Rapid7 Detection Coverage for Iran-Linked Cyber Activity

Rapid7 Intelligence

Alert Fatigue Isn’t Going Away. Here’s How Modern SOCs Are Fighting Back

Rapid7: 7 years of recognition in Gartner® Magic Quadrant™ for SIEM

Innovative Tunnelling and Forensic Tool Abuse: IR Tales from the Field

Key Takeaways from the Take Command Summit 2025: Outpacing the Adversary – Red Teaming in a Complex Threat Landscape

Key Takeaways from the Take Command Summit 2025: Demystifying Cloud Detection & Response – The Future of SOC and MDR

Active exploitation of SAP NetWeaver Visual Composer CVE-2025-31324

Password Spray Attacks Taking Advantage of Lax MFA

Fortinet Firewalls Hit with New Zero-Day Attack, Older Data Leak

Modular Java Backdoor Dropped in Cleo Exploitation Campaign

Christiaan Beek

Widespread Exploitation of Cleo File Transfer Software (CVE-2024-55956)

Investigating a SharePoint Compromise: IR Tales from the Field

Three Recommendations for Creating a Risk-Based Detection and Response Program

VMware ESXi CVE-2024-37085 Targeted in Ransomware Campaigns

Supply Chain Compromise Leads to Trojanized Installers for Notezilla, RecentX, Copywhiz

Malvertising Campaign Leads to Execution of Oyster Backdoor

CVE-2024-4978: Backdoored Justice AV Solutions Viewer Software Used in Apparent Supply Chain Attack

Rapid7 Recognized in the 2024 Gartner® Magic Quadrant™ for SIEM

Meaghan Buchanan

Ongoing Social Engineering Campaign Linked to Black Basta Ransomware Operators

Velociraptor 0.7.2 Release: Digging Deeper than Ever with EWF Support, Dynamic DNS and More