IntelligenceAdversary research you can operationalize today
CVEs, actor profiles, and detections you can action in Command. From the team that builds Metasploit, Vulnerability & Exploit Database, and Velociraptor.
Disclosures doubled
High- & critical-severity CVEs year-over-year - 8,539 vs 4,268 in Q2 2025
Holy grail flaws
Of exploited vulnerabilities required no auth and no user interaction (25 of 40)
U.S. victims
Ransomware leak-site listings in the U.S. - roughly 9× Germany, the next country
Underground listings
Exploit & access listings across 20 dark web sources, 23 CVEs actively traded
Disclosures doubled
High- & critical-severity CVEs year-over-year - 8,539 vs 4,268 in Q2 2025
Holy grail flaws
Of exploited vulnerabilities required no auth and no user interaction (25 of 40)
U.S. victims
Ransomware leak-site listings in the U.S. - roughly 9× Germany, the next country
Underground listings
Exploit & access listings across 20 dark web sources, 23 CVEs actively traded
Quarterly Threat Landscape Report Q3 2026
Ungated research, no sign up required.
Latest from the Intelligence team
.png?width=3840&quality=75)
Webcast
Inside the First 60 Minutes of an Attack
November 18, 2026
Virtual
Exposure Management
Patch Tuesday - November 2026
Vulnerabilities and Exploits
Critical vulnerabilities in N-able N-central prompt hosted shutdown
Podcast
Hacktics & Telemetry, E18: Microsoft Edge 0-Click & Kubernetes AI Security (ft. Derrick Sutherland)
Vulnerabilities and Exploits
Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)
Vulnerabilities and Exploits
Rapid7 Analysis: Unauthenticated File Upload to RCE in BeyondTrust Remote Support (CVE-2026-102764)
Metasploit
Metasploit Wrap Up: Langflow, MongoDB, and More
Threat Research
Q3 2026 Threat Update: Attackers Are Exploiting Vulnerabilities Within 3 Days
Vulnerability and Exploit Database
Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.
Rapid7 Intelligence, built in
Rapid7 Intelligence powers a suite of open-source tools used by security researchers, pen testers, and threat hunters worldwide. Continuously updated by the community and feeding directly into the Rapid7 Platform.
.png?width=3840&quality=75)
Threat Intelligence Services
Curated, actionable intel that accelerates response across your SOC.
.png?width=3840&quality=75)
Metasploit
The world's most widely used penetration testing framework, helping security teams verify vulnerabilities and manage risk-aware assessments.
.png?width=3840&quality=75)
Velociraptor
An advanced open-source digital forensics and incident response platform for hunting threats across enterprise endpoints at scale.
.png?width=3840&quality=75)
Project Sonar
A security research project that conducts internet-wide surveys to gain insights into global exposure to common vulnerabilities.
Research is only half the loop
Every Intelligence finding feeds the Command Platform, so the CVEs and detections here become prioritisation and hunts you can action.