Research

Defend Smarter, Not Harder: The Power of Curated Vulnerability Intelligence

Key Emerging Cybersecurity Threats and Challenges for 2025 and Beyond

Jeremy Makowski

Rapid7 at Pwn2Own: Raising the Bar in Vuln Intel

Independent Results Confirm Rapid7’s NGAV Delivers Strong, Reliable Protection

Inside Russian Market: Uncovering the Botnet Empire

Alexandra Blia, Maor Weinberger

The Business of Cybercrime: Raj Samani on Access, Ransomware, and What Comes Next

Rapid7 Analysis: CVE-2025-20362

Microsoft SharePoint Zero-Day Exploitation: What Public Sector Leaders Should Know

Rapid7 Analysis: CVE-2025-10035

Rapid7 Q2 2025 Incident Response Findings

An Earth-Shattering Kaboom: Bringing a Physical ICS Penetration Testing Environment to Life (Part 2)

Anna Katarina Quinn

Flashrom to Hexedit to Root: DEF CON 33 IoT Village Exercise

An Earth-Shattering Kaboom: Bringing a Physical ICS Penetration Testing Environment to Life (Part 1)

Anna Katarina Quinn

Inside the Ransomware Economy in 2025: Q2 Trends & Key Insights You Need to Know

Q2 2025 Ransomware Trends Analysis: Boom and Bust

CVE-2025-4365/CVE-2024-12284: NetScaler Console/SDX Authenticated Arbitrary File Read/Write (FIXED)

Konica Minolta bizhub Multifunction Printer: Pass-Back Attack Vulnerability (NOT FIXED)

From .pth to p0wned: Abuse of Pickle Files in AI Model Supply Chains

Christiaan Beek

Scattered Spider: Rapid7 Insights, Observations, and Recommendations

CVE-2025-6759: Citrix Virtual Apps and Desktops - Local Privilege Escalation (FIXED)

Multiple Brother Devices: Multiple Vulnerabilities (FIXED)