Posts tagged Research

Vulnerabilities and Exploits
CVE-2025-4365/CVE-2024-12284: NetScaler Console/SDX Authenticated Arbitrary File Read/Write (FIXED)
Calum Hutton

Vulnerabilities and Exploits
Konica Minolta bizhub Multifunction Printer: Pass-Back Attack Vulnerability (NOT FIXED)
Deral Heiland

Threat Research
From .pth to p0wned: Abuse of Pickle Files in AI Model Supply Chains
Christiaan Beek

Threat Research
Scattered Spider: Rapid7 Insights, Observations, and Recommendations
Rapid7 Labs

Vulnerabilities and Exploits
CVE-2025-6759: Citrix Virtual Apps and Desktops - Local Privilege Escalation (FIXED)
Brandon Fisher

Vulnerabilities and Exploits
Multiple Brother Devices: Multiple Vulnerabilities (FIXED)
Stephen Fewer

Detection and Response
Rapid7 Q1 2025 Incident Response Findings
Chris Boyd

Vulnerabilities and Exploits
CVE-2025-48045, CVE-2025-48046, CVE-2025-48047: MICI NetFax Server Product Vulnerabilities (NOT FIXED)
Anna Katarina Quinn

Vulnerabilities and Exploits
NSIS Abuse and sRDI Shellcode: Anatomy of the Winos 4.0 Campaign
Anna Širokova, Ivan Feigl

Threat Research
Multiple vulnerabilities in SonicWall SMA 100 series (FIXED)
Ryan Emmons

Detection and Response
2025 Ransomware: Business as Usual, Business is Booming
Chris Boyd

Detection and Response
A Rebirth of a Cursed Existence? Examining ‘Babuk Locker 2.0’ Ransomware
Rapid7

Detection and Response
Fake BianLian Ransomware Letters in Circulation
Chris Boyd

Threat Research
CVE-2025-1094: PostgreSQL psql SQL injection (FIXED)
Stephen Fewer

Threat Research
How To Protect Your Organization's Bluesky Account From Security Threats
Chris Boyd

Threat Research
The 2024 Ransomware Landscape: Looking back on another painful year
Christiaan Beek

Threat Research
Perfect Fit or Business Threat? How to Mitigate the Risk of Rogue Employees
Chris Boyd

Security Operations
New Research: Enhancing Botnet Detection with AI using LLMs and Similarity Search
Tom Caiazza

Threat Research
Out With the Old, In With the New: Securely Disposing of Smart Devices
Deral Heiland

Exposure Management
2024 Threat Landscape Statistics: Ransomware Activity, Vulnerability Exploits, and Attack Trends
Rapid7 Labs

Vulnerabilities and Exploits
New “CleverSoar” Installer Targets Chinese and Vietnamese Users
Natalie Zargarov