Emergent Threat Response

CVE-2022-41040 and CVE-2022-41082: Unpatched Zero-Day Vulnerabilities in Microsoft Exchange Server

CVE-2022-36804: Easily Exploitable Vulnerability in Atlassian Bitbucket Server and Data Center

Active Exploitation of Multiple Vulnerabilities in Zimbra Collaboration Suite

Active Exploitation of Atlassian’s Questions for Confluence App CVE-2022-26138

Exploitation of Mitel MiVoice Connect SA CVE-2022-29499

CVE-2022-27511: Citrix ADM Remote Device Takeover

Active Exploitation of Confluence CVE-2022-26134

CVE-2022-30190: "Follina" Microsoft Support Diagnostic Tool Vulnerability

CVE-2022-22972: Critical Authentication Bypass in VMware Workspace ONE Access, Identity Manager, and vRealize Automation

CVE-2022-30525 (FIXED): Zyxel Firewall Unauthenticated Remote Command Injection

Active Exploitation of F5 BIG-IP iControl REST CVE-2022-1388

Widespread Exploitation of VMware Workspace ONE Access CVE-2022-22954

Opportunistic Exploitation of WSO2 CVE-2022-29464

CVE-2022-28810: ManageEngine ADSelfService Plus Authenticated Command Execution (Fixed)

Spring4Shell: Zero-Day Vulnerability in Spring Framework (CVE-2022-22965)

CVE-2022-0847: Arbitrary File Overwrite Vulnerability in Linux Kernel

Russia/Ukraine Conflict: What Is Rapid7 Doing to Protect My Organization?

Staying Secure in a Global Cyber Conflict

Active Exploitation of VMware Horizon Servers

Using InsightVM to Find Apache Log4j CVE-2021-44228

Update on Log4Shell’s Impact on Rapid7 Solutions and Systems