Research

CVE-2020-2021 Authentication Bypass in PAN-OS Security Assertion Markup Language (SAML) Authentication Disclosed

Rapid7 Analysis: CVE-2020-2021 PAN-OS: Authentication Bypass in SAML Authentication

Rapid7 Intelligence

Building a Printed Circuit Board Probe Testing Jig

The Masked SYNger: Investigating a Traffic Phenomenon

matthew berninger

CVE-2020-12271: Sophos XG Firewall Pre-Auth SQL Injection Vulnerability Remediation Guidance and Exposure Overview

Meet AttackerKB

Phishing for SYSTEM on Microsoft Exchange (CVE-2020-0688)

CVE-2020-0796: Microsoft SMBv3 Remote Code Execution Vulnerability Analysis

DOUBLEPULSAR over RDP: Baselining Badness on the Internet

DOUBLEPULSAR RCE 2: An RDP Story

Active Exploitation of Citrix NetScaler (CVE-2019-19781): What You Need to Know

Oh, Behave! Who Made It to Rapid7 Labs' Naughty List(s) in 2019?

Cisco Self-Signed Certificate Expiration on Jan. 1, 2020: What You Need to Know

IoT Vuln Disclosure: Children's GPS Smart Watches (R7-2019-57)

R7-2019-32: Denial-of-Service Vulnerabilities in Beckhoff TwinCAT PLC Environment

Open-Source Command and Control of the DOUBLEPULSAR Implant

This One Time on a Pen Test: Your Mouse Is My Keyboard

This One Time on a Pen Test: Missed a Spot

This One Time on a Pen Test: How I Compromised a Healthcare Portal Before My Hot Cocoa Went Cold

Trevor O'Donnal

New Research: Investigating and Reversing Avionics CAN Bus Systems

Extracting Firmware from Microcontrollers’ Onboard Flash Memory, Part 4