Posts tagged Research

Threat Research
Exploitation of GoAnywhere MFT zero-day vulnerability
Caitlin Condon

Industry Trends
Rapid7 Observes Use of Microsoft OneNote to Spread Redline Infostealer and Qakbot Malware
Rapid7

Threat Research
Recog Release v3.0.3
Matthew Kienow

Threat Research
Year in Review: Rapid7 Cybersecurity Research
Tom Caiazza

Threat Research
CVE-2022-27510: Critical Citrix ADC and Gateway Remote Authentication Bypass Vulnerabilities
Rapid7

Threat Research
New Research: Optimizing DAST Vulnerability Triage with Deep Learning
Tom Caiazza

Threat Research
New Research: We’re Still Terrible at Passwords; Making it Easy for Attackers
Tod Beardsley

Threat Research
FLEXlm and Citrix ADM Denial of Service Vulnerability
Ron Bowes

Detection and Response
Baxter SIGMA Spectrum Infusion Pumps: Multiple Vulnerabilities (FIXED)
Deral Heiland

Threat Research
Architecting for Extortion: Acting on the IST’s Blueprint for Ransomware Defense
Erick Galinkin

Exposure Management
25 Years of Nmap: Happy Scan-iversary!
Tod Beardsley

Products and Tools
Pushing Open-Source Security Forward: Insights From Black Hat 2022
Jesse Mack

Products and Tools
Are Your Apps Exposed? Know Faster With Application Discovery in InsightAppSec
Ronan McCrory

Vulnerabilities and Exploits
Rapid7 Discovered Vulnerabilities in Cisco ASA, ASDM, and FirePOWER Services Software
Jake Baines

Threat Research
CVE-2022-31660 and CVE-2022-31661 (FIXED): VMware Workspace ONE Access, Identity Manager, and vRealize Automation LPE
Spencer McIntyre

Threat Research
What We're Looking Forward to at Black Hat, DEF CON, and BSidesLV 2022
Jesse Mack

Exposure Management
QNAP Poisoned XML Command Injection (Silently Patched)
Jake Baines

Threat Research
Primary Arms PII Disclosure via IDOR (FIXED)
Tod Beardsley

Exposure Management
To Maze and Beyond: How the Ransomware Double Extortion Space Has Evolved
Tom Caiazza

Security Operations
Today’s SOC Strategies Will Soon Be Inadequate
Dina Durutlic

Industry Trends
For Finserv Ransomware Attacks, Obtaining Customer Data Is the Focus
Tom Caiazza