Research

Metasploit Wrap-Up: 9/10/21

The Rise of Disruptive Ransomware Attacks: A Call To Action

Cloud Challenges in the Age of Remote Work: Rapid7’s 2021 Cloud Misconfigurations Report

Shelby Matthews

Rapid7 Analysis: CVE-2021-26084 Confluence Server OGNL injection

Rapid7 Intelligence

CVE-2021-3927[67]: Fortress S03 WiFi Home Security System Vulnerabilities

Slot Machines and Cybercrime: Why Ransomware Won't Quit Pulling Our Lever

Metasploit Wrap-Up: 7/23/2021

Rapid7 Analysis: CVE-2021-34527 "PrintNightmare"

Rapid7 Intelligence

Rapid7 Analysis: Pre-auth RCE in ForgeRock Access Manager (CVE-2021-35464)

Rapid7 Intelligence

Akkadian Provisioning Manager Multiple Vulnerabilities Disclosure (Fixed)

CVE-2021-3198 and CVE-2021-3540: MobileIron Shell Escape Privilege Escalation Vulnerabilities

Rapid7 Analysis: CVE-2021-21985

Rapid7 Intelligence

Rapid7 Analysis: CVE-2021-31166

Rapid7 Intelligence

Rapid7's 2021 ICER Takeaways: Vulnerability Disclosure Programs Among the Fortune 500

Rapid7 Analysis: CVE-2021-22893

Rapid7 Intelligence

CVE-2021-26908 and CVE-2021-26909: Automox Agent Information Disclosure (FIXED)

Rapid7 Analysis: CVE-2018-13379 Path Traversal in Fortinet FortiOS

Rapid7 Intelligence

Rapid7 Analysis: CVE-2021-21975

Rapid7 Intelligence

Rapid7 Analysis: CVE-2020-12271: Sophos XG Firewall Pre-Auth SQL Injection Vulnerability

Rapid7 Intelligence

Rapid7 Analysis: CVE-2021-3450

Rapid7 Intelligence

Rapid7 Analysis: OpenSSL TLS Server Crash (NULL pointer dereference) — CVE-2021-3449

Rapid7 Intelligence