Posts tagged Research

Products and Tools
Rapid7 and USF: Building a diverse cybersecurity workforce is not optional
Rapid7

Detection and Response
Nearly 19,000 ESXi Servers Still Vulnerable to CVE-2021-21974
Erick Galinkin

Detection and Response
Evasion Techniques Uncovered: An Analysis of APT Methods
Christiaan Beek

Threat Research
Exploitation of GoAnywhere MFT zero-day vulnerability
Caitlin Condon

Industry Trends
Rapid7 Observes Use of Microsoft OneNote to Spread Redline Infostealer and Qakbot Malware
Rapid7

Threat Research
Recog Release v3.0.3
Matthew Kienow

Threat Research
Year in Review: Rapid7 Cybersecurity Research
Tom Caiazza

Threat Research
CVE-2022-27510: Critical Citrix ADC and Gateway Remote Authentication Bypass Vulnerabilities
Rapid7

Threat Research
New Research: Optimizing DAST Vulnerability Triage with Deep Learning
Tom Caiazza

Threat Research
New Research: We’re Still Terrible at Passwords; Making it Easy for Attackers
Tod Beardsley

Threat Research
FLEXlm and Citrix ADM Denial of Service Vulnerability
Ron Bowes

Detection and Response
Baxter SIGMA Spectrum Infusion Pumps: Multiple Vulnerabilities (FIXED)
Deral Heiland

Threat Research
Architecting for Extortion: Acting on the IST’s Blueprint for Ransomware Defense
Erick Galinkin

Exposure Management
25 Years of Nmap: Happy Scan-iversary!
Tod Beardsley

Products and Tools
Pushing Open-Source Security Forward: Insights From Black Hat 2022
Jesse Mack

Products and Tools
Are Your Apps Exposed? Know Faster With Application Discovery in InsightAppSec
Ronan McCrory

Vulnerabilities and Exploits
Rapid7 Discovered Vulnerabilities in Cisco ASA, ASDM, and FirePOWER Services Software
Jake Baines

Threat Research
CVE-2022-31660 and CVE-2022-31661 (FIXED): VMware Workspace ONE Access, Identity Manager, and vRealize Automation LPE
Spencer McIntyre

Threat Research
What We're Looking Forward to at Black Hat, DEF CON, and BSidesLV 2022
Jesse Mack

Exposure Management
QNAP Poisoned XML Command Injection (Silently Patched)
Jake Baines

Threat Research
Primary Arms PII Disclosure via IDOR (FIXED)
Tod Beardsley