Emerging Threats

Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild

CVE-2026-63030: wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core

CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED)

CVE-2026-41940: cPanel & WHM Authentication Bypass

CVE-2026-33032: Nginx UI Missing MCP Authentication

FortiGate CVE-2025-59718 Exploitation: Incident Response Findings

Eric Carey, Olivia Henderson, Noah Hemker

The Attack Cycle is Accelerating: Announcing the Rapid7 2026 Global Threat Landscape Report

Introducing Hacktics and Telemetry, a Podcast from Rapid7 Labs

Douglas McKee, Director, Vulnerability Intelligence

Critical Cisco Catalyst Vulnerability Exploited in the wild (CVE-2026-20127)

CVE-2026-1731: Critical Unauthenticated Remote Code Execution in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

Chrysalis, Notepad++, and Supply Chain Risk: What it Means, and What to Do Next

Critical Ivanti Endpoint Manager Mobile (EPMM) zero-day exploited in the wild (CVE-2026-1281 & CVE-2026-1340)

Multiple Critical SolarWinds Web Help Desk Vulnerabilities: CVE-2025-40551, CVE-2025-40552, CVE-2025-40553, CVE-2025-40554

Ni8mare and N8scape flaws among multiple critical vulnerabilities affecting n8n

MongoBleed CVE-2025-14847: Critical Memory Leak in MongoDB Allowing Attackers to Extract Sensitive Data

Inside the F5 Breach: What We Know and Recommended Actions

Crimson Collective: A New Threat Group Observed Operating in the Cloud

Russia/Ukraine Conflict: What Is Rapid7 Doing to Protect My Organization?

Staying Secure in a Global Cyber Conflict

Trojan Source CVE-2021-42572: No Panic Necessary