Research

CVE-2026-31381, CVE-2026-31382: Gainsight Assist Information Disclosure and Cross-Site Scripting (FIXED)

Christopher O’Boyle

The Attack Cycle is Accelerating: Announcing the Rapid7 2026 Global Threat Landscape Report

Rapid7 Intelligence

Rapid7 Analysis: Cisco Catalyst SD-WAN Authentication Bypass (CVE-2026-20127)

When Trusted Websites Turn Malicious: WordPress Compromises Advance Global Stealer Operation

Before the Breach: When digital footprints become a strategic cyber risk

Jeremy Makowski

Your MRI is Online: The Hidden Risks of Exposed DICOM Servers in UK Healthcare

The Post-RAMP Era: Allegations, Fragmentation, and the Rebuilding of the Ransomware Underground

Alexandra Blia, Efi Sherman

New Report: The Digital Footprints of Many Executives Can Leave Their Companies Seriously Exposed

The Phone is Listening: A Cold War–Style Vulnerability in Modern VoIP

Douglas McKee, Director, Vulnerability Intelligence

CVE-2026-2329: Critical Unauthenticated Stack Buffer Overflow in Grandstream GXP1600 VoIP Phones (FIXED)

Measuring AI Security: Separating Signal from Panic

Christiaan Beek

Rapid7 Analysis: CVE-2026-1731

Rapid7 Intelligence

Chrysalis, Notepad++, and Supply Chain Risk: What it Means, and What to Do Next

The Chrysalis Backdoor: A Deep Dive into Lotus Blossom’s toolkit

Rapid7 Analysis: CVE-2025-37164

Rapid7 Intelligence

New Research: Multifunction Printer (MFP) Security Concerns within the Enterprise Business Environment

Deral Heiland, Sam Moses

CVE-2025-10573: Ivanti EPM Unauthenticated Stored Cross-Site Scripting (Fixed)

From Extortion to E-commerce: How Ransomware Groups Turn Breaches into Bidding Wars

Alexandra Blia, Gal Givon

Rapid7 Analysis: CVE-2025-58034

Rapid7 Intelligence

CVE-2025-13315, CVE-2025-13316: Critical Twonky Server Authentication Bypass (NOT FIXED)

Threat Landscape of the Building and Construction Sector Part Two: Ransomware

Jeremy Makowski