111 articles · page 2 of 3
Rapid7, Monday, March 30th, 2026
Red teaming has always played a role in testing defenses, but in 2026 its role is changing. Security teams are no longer asking whether an attacker can get in. That question has already been answered. The real challenge is whether teams can detect, validate, and respond before an incident escalates.
more →
Rapid7, March 27,2026
For years, cybersecurity professionals have relied on a familiar metric to dictate their day-to-day priorities: the Common Vulnerability Scoring System (CVSS).
more → Rapid7, March 26,2026
A months-long investigation by Rapid7 Labs has uncovered evidence of an advanced China-nexus threat actor, Red Menshen, placing some of the stealthiest digital sleeper cells the team has ever seen in telecommunications networks.
more → Rapid7, March 25,2026
Web applications are no longer just business enablers, they're often the front door to an organization. They can often generate revenue, enforce identity, connect systems and hold customer and business data.
more → Rapid7, March 24,2026
If you're a security leader operating in Germany, Austria, or Switzerland, you already know that compliance isn't a checkbox. It's a competitive differentiator. Rapid7 has completed BSI C5 Type 2 attestation for the Rapid7 Command Platform, including Threat Command, and it's a milestone worth unpacking.
more → Rapid7, March 24,2026
Rapid7 has released a whitepaper titled 'The Weaponization of Cellular Based IoT Technology,' by Deral Heiland, principal security researcher, IoT, at Rapid7, and Carlota Bindner, lead product security researcher at Thermo Fisher Scientific.
more → Rapid7, Friday, March 20th, 2026
Security leaders rarely struggle to produce data. The challenge is turning that data into something the board can use to make decisions.
more → Rapid7, Monday, March 16th, 2026
The Rapid7 MDR team is currently monitoring an increase in phishing campaigns where threat actors (TAs) impersonate internal IT departments via Microsoft Teams.
more → Rapid7, Thursday, March 12th, 2026
The role and demand for red-teaming capabilities are growing, as more exploitable CVEs make their way into criminal hands. Being proactive is no longer a capability that can be reserved for annual tests, but a continuous assessment to determine exposure and even through the validation of an organization's security posture.
more → Rapid7, Thursday, March 12th, 2026
If you spend your days building, shipping, defending, or fixing systems, you already know how this goes. A new technique shows up in a research thread, someone drops a 'has anyone checked if we're exposed?' comment, and suddenly you're juggling risk, patches, logging gaps, and whatever tool is in the blast radius this week.
more → Rapid7, Wednesday, March 11th, 2026
Rapid7 and Symmetry Systems are partnering to help organizations reduce breach impact by aligning sensitive data intelligence with real-world exposure paths across both human and machine identities.
more → Rapid7, Tuesday, March 10th, 2026
Rapid7 Labs has identified and analyzed an ongoing, widespread compromise of legitimate, potentially highly trusted WordPress websites, misused by an unidentified threat actor to inject a ClickFix implant impersonating a Cloudflare human verification challenge (CAPTCHA).
more → Rapid7, Tuesday, March 10th, 2026
Purple teaming is often described as the collaboration between red teams and blue teams. That definition is accurate, but incomplete. At its core, purple teaming is about exposure validation: deliberately testing whether the threats you believe you can detect and contain are actually visible in your environment.
more → Rapid7, Monday, March 9th, 2026
To understand your attack surface, and all related exposures, Rapid7's Command Platform provides Attack Surface Management, (included in Surface Command, Exposure Command and Incident Command).
more → Rapid7, Thursday, February 26th, 2026
For years, organizations have prioritized strengthening technical defenses, including hardening networks, accelerating patch management, and expanding endpoint detection and response capabilities. Defensive systems have become more adaptive, identity has moved to the center of security architectures, and zero-trust has emerged as a foundational design principle.
more → Rapid7, Tuesday, February 24th, 2026
Senior leaders are visible by design. They speak at events, post on LinkedIn, sit on boards, and sign public filings. That visibility builds brands and drives growth. It also creates risk.
more → Rapid7, Monday, February 23rd, 2026
Security teams have been talking about alert fatigue for years. And yet, for many SOCs, the problem isn't getting better. It's getting worse.
more → Rapid7, Thursday, February 12th, 2026
Despite sustained efforts by the global banking and payments industry, credit card fraud continues to affect consumers and organizations on a large scale. Underground 'dump shops' play a central role in this activity, selling stolen credit and debit card data to criminals who use it to conduct unauthorized transactions and broader fraud campaigns.
more → Rapid7, Tuesday, February 10th, 2026
Microsoft is publishing 55 vulnerabilities this February 2026 Patch Tuesday. Microsoft is aware of exploitation in the wild for six of today's vulnerabilities, and notes public disclosure for three of those. Earlier in the month, Microsoft provided patches to address three browser vulnerabilities, which are not included in the Patch Tuesday count above.
more → Rapid7, Tuesday, February 10th, 2026
The conversation around AI security is full of anxiety. Every week, new headlines warn of jailbreaks, prompt injection, agents gone rogue, and the rise of LLM-enabled cybercrime. It's easy to come away with the impression that AI is fundamentally uncontrollable and dangerous, and therefore something we need to lock down before it gets out of hand.
more → Rapid7, Thursday, February 5th, 2026
When Rapid7 published its analysis of the Chrysalis backdoor linked to a compromise of Notepad++ update infrastructure, it raised understandable questions from customers and security teams.
more → Rapid7, Tuesday, February 3rd, 2026
In 2025, we launched Experts on Experts: Commanding Perspectives as a pilot video series designed to spotlight the ideas shaping cybersecurity, directly from the people driving them.
more → Rapid7, Wednesday, January 28th, 2026
If you received an email with the subject 'I LOVE YOU' and an attachment called 'LOVE-LETTER-FOR-YOU.TXT', would you open it? Probably not, but back in the year 2000, plenty of people did exactly that.
more → Rapid7, Thursday, January 22nd, 2026
The 2026 Security Predictions webinar reinforced a simple but uncomfortable truth. The forces shaping cyber risk are not new, but they are converging faster and with greater impact than many organizations are ready for. Geopolitics, insider risk, and threat intelligence have long influenced cyber operations. What has changed is the extent to which they directly affect everyday security decisions.
more → Rapid7, Wednesday, January 14th, 2026
Microsoft is publishing 114 vulnerabilities this January 2026 Patch Tuesday. Today's menu includes just one vulnerability marked as exploited in the wild, as well as two vulnerabilities where Microsoft is aware of public disclosure.
more → Rapid7, Wednesday, December 17th, 2025
Philip Ingram, Former Senior Military Intelligence Officer, hosted Rapid7's annual Cybersecurity predications webinar to hear from three of the company's experts, each discussing the evolving nature of the cybersecurity landscape.
more →
Rapid7, December 11,2025
Rapid7 released its top cybersecurity predictions for 2026 from executives Raj Samani, Sabeen Malik, and Rob Dooley during its Top Cybersecurity Predictions for 2026 webinar.
more → Rapid7, Thursday, November 6th, 2025
It starts innocently enough. A new meeting appears in your Google calendar and the subject seems ordinary, perhaps even urgent: 'Security Update Briefing,' 'Your Account Verification Meeting,' or 'Important Notice Regarding Benefits.' You assume you missed this invitation in your overloaded email inbox, and click 'Yes' to accept.
more → Rapid7, Thursday, November 6th, 2025
Cybersecurity ROI is notoriously difficult to define, but not impossible. In this Experts on Experts: Commanding Perspectives episode, Craig Adams chats with Steve Edwards, Director of Threat Intelligence & Detection Engineering, about what customers really get from Rapid7 MDR and how to think more clearly about value.
more → Rapid7, Thursday, October 30th, 2025
The Rapid7 Threat Focus: Salt Typhoon report profiles one of the most sophisticated and persistent state-sponsored threat actors operating today.
more → Rapid7, Wednesday, October 29th, 2025
Exposures are rising faster than security teams can decide what to fix, and those teams often lack a clear view of business impact per risk. Which critical assets are exposed? Are exploits active? What are the operational consequences?
more → Rapid7, Wednesday, October 29th, 2025
Rapid7 announced AI-generated risk intelligence as part of the Rapid7 Command Platform. Delivered through Remediation Hub, the new capability accelerates remediation by giving security teams a contextual, and actionable view of each exposure, transforming vulnerability data into risk intelligence informed decisions that help teams to prioritize remediation, and communicate and collaborate with internal teams to drive measurable risk reduction
more →
Rapid7, Wednesday, October 29th, 2025
Let's be honest, we as an industry spend far too long responding to issues that simply don't matter. Chasing down false positives, reviewing threat intelligence reports that bear no relation to our sector, and more recently reviewing vulnerability advisories of systems not deployed within the environment.
more →
Rapid7, Monday, October 27th, 2025
The global threat landscape is undergoing an unprecedented transformation. Organizations are facing dizzying levels of complexity, driven by rapid technological innovation, the widespread adoption of artificial intelligence, and the expected disruptive effects of quantum computing.
more → Rapid7, Monday, October 6th, 2025
When we last wrote about the rising tide of cyberattacks hitting the retail sector, the headlines were already sobering: disruption at major brands, ransomware claims, and attackers showing a deep understanding of how to break into systems and exploit trust.
more → Rapid7, Thursday, September 25th, 2025
On September 25, 2025, Cisco published advisories for three notable vulnerabilities affecting many different Cisco products.
more → Rapid7, Monday, September 22nd, 2025
Rapid7 has identified a permission bypass vulnerability in multiple versions of OnePlus OxygenOS installed on its Android smartphones, across multiple devices.
more → Rapid7, September 17,2025
IT security teams are overloaded. Between surging data volumes, an endless stream of cloud security alerts, and rising threats from AI-enabled hacker tools, many IT admins admit to fatigue. Rapid7 is responding by embedding AI into every part of its Command Platform, giving teams a faster way to triage alerts and reduce cyber risk.
more → Rapid7, Thursday, September 4th, 2025
Automated security scanners can be stopped in their tracks by Multi-Factor Authentication (MFA). While this is great for security, it poses a challenge for scanning. Luckily, Rapid7's InsightAppSec makes it easy to handle Time-based One-Time Passwords (TOTP), a six-digit code that refreshes every 30 seconds.
more → Rapid7, Wednesday, September 3rd, 2025
Google Cloud Threat Intelligence recently reported a data theft campaign targeting Salesforce customers through compromised OAuth tokens. In this case, attackers stole Salesforce OAuth and refresh tokens from a third-party integration (Salesloft Drift) and used them to access and exfiltrate sensitive data including AWS access keys, passwords, and Snowflake tokens.
more → Rapid7, Wednesday, August 27th, 2025
Rapid7, Inc. (NASDAQ: RPD), a leader in threat detection and exposure management, today announced it has been positioned in the Leaders category of the IDC MarketScape: Worldwide Exposure Management 2025 Vendor Assessment
more → Rapid7, Monday, August 18th, 2025
When a zero-day exploit targets your infrastructure, the clock starts ticking. Fast. And in today's threat landscape, speed without context is chaos.
more → Rapid7, Monday, August 18th, 2025
In today's threat landscape, meeting compliance requirements like PCI DSS, SOC 2, and the NIST Cybersecurity Framework is no longer just about ticking boxes. It's about proving that your security controls actually work under pressure.
more → Rapid7, Wednesday, July 30th, 2025
When we talk about cybersecurity, much of the focus tends to center around keeping attackers out-blocking unauthorized access, hardening perimeter defenses, and protecting login credentials. These are all important protections, but what happens once someone is inside the system, even with legitimate access?
more → Rapid7, Wednesday, July 30th, 2025
Building on insights from Rapid7's Q1 and Q2 2025 ransomware trend reports, it's clear that the ransomware economy continues to evolve - and not just in volume, but also in business maturity.
more → Rapid7, Thursday, July 24th, 2025
"Tumultuous times" would be an accurate summary of Q2 2025 where ransomware threat actors are concerned. Rapid7's internal and publicly-available data analysis reveals a dynamic environment where major players come and go, newer groups work their way up the heavy-hitters ladder, and threat actors jostle for top dog status.
more →
Rapid7, July 1,2025
Recent threat research highlights a growing risk in the Python and machine learning (ML) ecosystem: the exploitation of serialized model files, specifically those using Python's pickle module.
more → Rapid7, Monday, June 23rd, 2025
Many aspects of what makes an investigation successful are the best parts of human intelligence: judgment, contextual awareness, and strategic thinking. But the overwhelming demands of the current security landscape - with attacker breakout times now under an hour - narrow the window for these techniques to be applied at scale. But what if you could encode the instincts of an experienced analyst into every investigation and execute at machine speed?
more → Rapid7, Wednesday, June 18th, 2025
Security teams are under more pressure than ever. With attack surfaces growing, regulations tightening, and the average breach cost climbing, it's no surprise that many organizations are rethinking how they approach vulnerability management.
more → Rapid7, Wednesday, June 18th, 2025
AI is transforming every part of cybersecurity - and the risks and opportunities are expanding fast. In Rise of the Machines: Building Cyber Resilience with AI, part of the Take Command 2025 Virtual Cybersecurity Summit, experts explored the real-world impact of AI on security operations today.
more →