Posts tagged Research

New “CleverSoar” Installer Targets Chinese and Vietnamese Users

Vulnerabilities and Exploits

New “CleverSoar” Installer Targets Chinese and Vietnamese Users

Natalie Zargarov's avatar

Natalie Zargarov

A Bag of RATs: VenomRAT vs. AsyncRAT

Threat Research

A Bag of RATs: VenomRAT vs. AsyncRAT

Anna Širokova's avatar

Anna Širokova

Multiple Vulnerabilities in Wowza Streaming Engine (Fixed)

Threat Research

Multiple Vulnerabilities in Wowza Streaming Engine (Fixed)

Ryan Emmons's avatar

Ryan Emmons

Rapid7 Analysis: CVE-2024-47575

Threat Research

Rapid7 Analysis: CVE-2024-47575

Rapid7 Labs's avatar

Rapid7 Labs

LodaRAT: Established Malware, New Victim Patterns

Threat Research

LodaRAT: Established Malware, New Victim Patterns

Natalie Zargarov's avatar

Natalie Zargarov

Ransomware Groups Demystified: CyberVolk Ransomware

Detection and Response

Ransomware Groups Demystified: CyberVolk Ransomware

Rapid7 Labs's avatar

Rapid7 Labs

New Research: The Proliferation of Cellular in IoT

Threat Research

New Research: The Proliferation of Cellular in IoT

Rapid7's avatar

Rapid7

Defending Against APTs: A Learning Exercise with Kimsuky

Threat Research

Defending Against APTs: A Learning Exercise with Kimsuky

Raj Samani's avatar

Raj Samani

Rapid7 Analysis: CVE-2024-5806

Threat Research

Rapid7 Analysis: CVE-2024-5806

Rapid7 Labs's avatar

Rapid7 Labs

Rapid7 Analysis: CVE-2024-28995

Threat Research

Rapid7 Analysis: CVE-2024-28995

Rapid7 Labs's avatar

Rapid7 Labs

Rapid7 Releases the 2024 Attack Intelligence Report

Threat Research

Rapid7 Releases the 2024 Attack Intelligence Report

Rapid7's avatar

Rapid7

Rapid7 Analysis: CVE-2024-4040

Threat Research

Rapid7 Analysis: CVE-2024-4040

Rapid7 Labs's avatar

Rapid7 Labs

Rapid7 Analysis: CVE-2024-3400

Threat Research

Rapid7 Analysis: CVE-2024-3400

Rapid7 Labs's avatar

Rapid7 Labs

Stories from the SOC Part 2: MSIX Installer Utilizes Telegram Bot to Execute IDAT Loader

Detection and Response

Stories from the SOC Part 2: MSIX Installer Utilizes Telegram Bot to Execute IDAT Loader

Tom Elkins's avatar

Tom Elkins

Why The External Attack Surface Matters: An analysis into APAC related threat activities

Threat Research

Why The External Attack Surface Matters: An analysis into APAC related threat activities

Rapid7's avatar

Rapid7

The Updated APT Playbook: Tales from the Kimsuky threat actor group

Threat Research

The Updated APT Playbook: Tales from the Kimsuky threat actor group

Rapid7's avatar

Rapid7

Rapid7 Analysis: CVE-2024-27198

Threat Research

Rapid7 Analysis: CVE-2024-27198

Rapid7 Labs's avatar

Rapid7 Labs

Rapid7 Analysis: CVE-2024-27199

Threat Research

Rapid7 Analysis: CVE-2024-27199

Rapid7 Labs's avatar

Rapid7 Labs

CVE-2024-27198 and CVE-2024-27199: JetBrains TeamCity Multiple Authentication Bypass Vulnerabilities (FIXED)

Threat Research

CVE-2024-27198 and CVE-2024-27199: JetBrains TeamCity Multiple Authentication Bypass Vulnerabilities (FIXED)

Rapid7's avatar

Rapid7

High-Risk Vulnerabilities in ConnectWise ScreenConnect

Threat Research

High-Risk Vulnerabilities in ConnectWise ScreenConnect

Rapid7's avatar

Rapid7

RCE to Sliver: IR Tales from the Field

Threat Research

RCE to Sliver: IR Tales from the Field

Noah Hemker's avatar

Noah Hemker