Incident Response

What Happened Between OpenAI and Hugging Face?

ClickFix Phishing Campaign Masquerading as a Claude Installer

Nicholas Spagnola

FortiGate CVE-2025-59718 Exploitation: Incident Response Findings

Eric Carey, Olivia Henderson, Noah Hemker

Identifying and Mitigating Potential Velociraptor Abuse

Christiaan Beek

Rapid7 Q2 2025 Incident Response Findings

Akira Ransomware Group Utilizing SonicWall Devices for Initial Access

Introducing Rapid7 Incident Command: The Future of AI-Powered Security Operations Is Here

Innovative Tunnelling and Forensic Tool Abuse: IR Tales from the Field

BlackSuit Continues Social Engineering Attacks in Wake of Black Basta’s Internal Conflict

Rapid7 Q1 2025 Incident Response Findings

Black Basta Ransomware Campaign Drops Zbot, DarkGate, and Custom Malware

Investigating a SharePoint Compromise: IR Tales from the Field

Malvertising Campaign Leads to Execution of Oyster Backdoor

Ongoing Social Engineering Campaign Linked to Black Basta Ransomware Operators

RCE to Sliver: IR Tales from the Field

Grey Time: The Hidden Cost of Incident Response

Incident Reporting Regulations Summary and Chart

Avoiding Smash and Grab Under the SEC’s Proposed Cyber Rule

How to Strategically Scale Vendor Management and Supply Chain Security

Sharpen Your IR Capabilities With Rapid7’s Detection and Response Workshop

New US Law to Require Cyber Incident Reports