Project Sonar

Are Your Apps Exposed? Know Faster With Application Discovery in InsightAppSec

Rapid7's 2021 ICER Takeaways: High-Risk Services Among the Fortune 500

Don’t Put It on the Internet: Tesla Backup Gateway Edition

Microsoft Exchange 2010 End of Support and Overall Patching Study

CVE-2020-3452 Cisco ASA / Firepower Read-Only Path Traversal Vulnerability: What You Need to Know

CVE-2020-2021 Authentication Bypass in PAN-OS Security Assertion Markup Language (SAML) Authentication Disclosed

CVE-2020-12271: Sophos XG Firewall Pre-Auth SQL Injection Vulnerability Remediation Guidance and Exposure Overview

Phishing for SYSTEM on Microsoft Exchange (CVE-2020-0688)

DOUBLEPULSAR over RDP: Baselining Badness on the Internet

Oh, Behave! Who Made It to Rapid7 Labs' Naughty List(s) in 2019?

Exim Vulnerability (CVE-2019-16928): Global Exposure Details and Remediation Advice

Attack Surface Monitoring with Project Sonar

Confluence Unauthorized RCE Vulnerability (CVE-2019-3396): What You Need to Know

Apache HTTP Server Privilege Escalation (CVE-2019-0211): What You Need to Know

A Serial Problem: Exploitation and Exposure of Java Serialized Objects

Cisco® RV110/RV130/RV215 Unauthenticated Configuration Export Vulnerability (CVE-2019-1663): What You Need to Know

Understanding Ubiquiti Discovery Service Exposures

Cisco RV320/RV325 Router Unauthenticated Configuration Export Vulnerability (CVE-2019-1653): What You Need to Know

Rsunk your Battleship: An Ocean of Data Exposed through Rsync

Securing Buckets with Amazon S3 Block Public Access

How to Conduct DNS Reconnaissance for $.02 Using Rapid7 Sonar Data and AWS