Research

Q3 2026 Threat Update: Attackers Are Exploiting Vulnerabilities Within 3 Days

Rapid7 Intelligence

Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

From One Account to Every Mailbox: Breaking Zimbra's Identity Boundaries (Part 1)

SMTP is the key: BPFDoor and AVERAT hitting the network edge

Rapid7 Intelligence

New Report: AI threats are here. Why Q2 2026 signals the end of traditional patch cycles

Rapid7 Intelligence

AI is Working in the SOC. So Why are Security Executives More Worried Than Ever?

CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED)

What’s New in Rapid7 Products and Services: Q2 2026 in Review

Sunsetting the Public AttackerKB Platform

Douglas McKee, Director, Vulnerability Intelligence

CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED)

Criminal AI-as-a-Service in 2026: How the Underground Market Is Operationalizing Cybercrime

Jeremy Makowski

CVE-2026-0826: How an Old Bug Can Feed AI-Powered Impersonation

Douglas McKee, Director, Vulnerability Intelligence

CVE-2026-0826: Critical unauthenticated stack buffer overflow in HP Poly VVX and Trio VoIP Phones (FIXED)

CVE-2026-52806: Authenticated RCE via Argument Injection in Gogs (FIXED as of June 7, 2026)

Rapid7 Quarterly Threat Landscape Report: Zero-clicks, geopolitical tensions, and some wins for law enforcement

Rapid7 Intelligence

CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED)

Jonah Burgess, Stephen Fewer

The Dark Side of Efficiency: When Network Controllers Become "God Mode" for Attackers

Douglas McKee, Director, Vulnerability Intelligence

When IT Support Calls: Dissecting a ModeloRAT Campaign from Teams to Domain Compromise

New Whitepaper: Stealthy BPFDoor Variants are a Needle That Looks Like Hay

Rapid7 Intelligence

BPFdoor in Telecom Networks: Sleeper Cells in the Backbone

Rapid7 Intelligence

New Whitepaper: Exploiting Cellular-based IoT Devices