Labs

When IT Support Calls: Dissecting a ModeloRAT Campaign from Teams to Domain Compromise

Muddying the Tracks: The State-Sponsored Shadow Behind Chaos Ransomware

Alexandra Blia, Ivan Feigl

Experts on Experts: The 2026 Threat Landscape is Moving Faster than Defenders Expect

What’s New in Rapid7 Products and Services: Q1 2026 in Review

New Whitepaper: Stealthy BPFDoor Variants are a Needle That Looks Like Hay

Rapid7 Intelligence

Initial Access Brokers have Shifted to High-Value Targets and Premium Pricing

Rapid7 Intelligence

BPFdoor in Telecom Networks: Sleeper Cells in the Backbone

Rapid7 Intelligence

The Attack Cycle is Accelerating: Announcing the Rapid7 2026 Global Threat Landscape Report

Rapid7 Intelligence

Rapid7 Analysis: CVE-2026-20127

Rapid7 Intelligence

When Trusted Websites Turn Malicious: WordPress Compromises Advance Global Stealer Operation

Before the Breach: When digital footprints become a strategic cyber risk

Jeremy Makowski

Your MRI is Online: The Hidden Risks of Exposed DICOM Servers in UK Healthcare

The Post-RAMP Era: Allegations, Fragmentation, and the Rebuilding of the Ransomware Underground

Alexandra Blia, Efi Sherman

New Report: The Digital Footprints of Many Executives Can Leave Their Companies Seriously Exposed

Carding-as-a-Service: The Underground Market of Stolen Cards

Alexandra Blia, Maor Weinberger, Gal Givon

Rapid7 Analysis: CVE-2026-1731

Rapid7 Intelligence

The Chrysalis Backdoor: A Deep Dive into Lotus Blossom’s toolkit

Beyond the Device: Exploring the New Security Risks of Interconnected IoT at CES 2026

Rapid7 Analysis: CVE-2025-37164

Rapid7 Intelligence

SantaStealer is Coming to Town: A New, Ambitious Infostealer Advertised on Underground Forums

Geopolitics and Cyber Risk: How Global Tensions Shape the Attack Surface

Jeremy Makowski