Research

From .pth to p0wned: Abuse of Pickle Files in AI Model Supply Chains

Christiaan Beek

Scattered Spider: Rapid7 Insights, Observations, and Recommendations

Rapid7 Intelligence

CVE-2025-6759: Citrix Virtual Apps and Desktops - Local Privilege Escalation (FIXED)

Multiple Brother Devices: Multiple Vulnerabilities (FIXED)

Rapid7 Q1 2025 Incident Response Findings

CVE-2025-48045, CVE-2025-48046, CVE-2025-48047: MICI NetFax Server Product Vulnerabilities (NOT FIXED)

Anna Katarina Quinn

Rapid7 Analysis: CVE-2024-58136

Rapid7 Intelligence

NSIS Abuse and sRDI Shellcode: Anatomy of the Winos 4.0 Campaign

Anna Širokova, Ivan Feigl

Multiple vulnerabilities in SonicWall SMA 100 series (FIXED)

Rapid7 Analysis: CVE-2025-22457

Rapid7 Intelligence

2025 Ransomware: Business as Usual, Business is Booming

A Rebirth of a Cursed Existence? Examining ‘Babuk Locker 2.0’ Ransomware

Rapid7 Analysis: CVE-2025-2825

Rapid7 Intelligence

Fake BianLian Ransomware Letters in Circulation

Rapid7 Analysis: CVE-2024-12084

Rapid7 Intelligence

CVE-2025-1094: PostgreSQL psql SQL injection (FIXED)

Rapid7 Analysis: CVE-2024-12356

Rapid7 Intelligence

How To Protect Your Organization's Bluesky Account From Security Threats

Rapid7 Analysis: CVE-2024-53704

Rapid7 Intelligence

The 2024 Ransomware Landscape: Looking back on another painful year

Christiaan Beek

Perfect Fit or Business Threat? How to Mitigate the Risk of Rogue Employees