The Rapid7 Blog:
Your Signal in the Security Noise

Insights, stories, and guidance from our global security and research teams.

Weekly security updates — no spam. Privacy Policy.

CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway

Vulnerabilities and Exploits

CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway

Rapid7's avatar

Rapid7

Rapid7 and Licencias OnLine Partner to Accelerate Cybersecurity Maturity across Latin America

Culture

Rapid7 and Licencias OnLine Partner to Accelerate Cybersecurity Maturity across Latin America

Cássio De Alcântara's avatar

Cássio De Alcântara

New Report: AI threats are here. Why Q2 2026 signals the end of traditional patch cycles

Threat Research

New Report: AI threats are here. Why Q2 2026 signals the end of traditional patch cycles

Rapid7 Labs's avatar

Rapid7 Labs

Operation ASTERIX: Anatomy of a Crypto Fraud Pipeline

Threat Research

Operation ASTERIX: Anatomy of a Crypto Fraud Pipeline

Anna Širokova's avatar
Jan Recinsky's avatar

Anna Širokova, Jan Recinsky

Africa’s Cybersecurity Challenge Is Bigger Than Access to Technology

Culture

Africa’s Cybersecurity Challenge Is Bigger Than Access to Technology

Gopan Sivasankaran's avatar

Gopan Sivasankaran

Metasploit Wrap Up: Lot of summer shells and fit http profiles

Products and Tools

Metasploit Wrap Up: Lot of summer shells and fit http profiles

Rapid7 Labs's avatar

Rapid7 Labs

AI is Working in the SOC. So Why are Security Executives More Worried Than Ever?

Artificial Intelligence

AI is Working in the SOC. So Why are Security Executives More Worried Than Ever?

Rapid7's avatar

Rapid7

Patch Tuesday - August 2026

Exposure Management

Patch Tuesday - August 2026

Adam Barnett's avatar

Adam Barnett

Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)

Vulnerabilities and Exploits

Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)

Stephen Fewer's avatar

Stephen Fewer

CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED)

Vulnerabilities and Exploits

CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED)

Stephen Fewer's avatar

Stephen Fewer

Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)

Vulnerabilities and Exploits

Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)

Stephen Fewer's avatar

Stephen Fewer

CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild

Vulnerabilities and Exploits

CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild

Rapid7's avatar

Rapid7

Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066)

Vulnerabilities and Exploits

Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066)

Jonah Burgess's avatar

Jonah Burgess

Metasploit Pro 5.1 Released

Products and Tools

Metasploit Pro 5.1 Released

The Metasploit Team's avatar

The Metasploit Team

Rapid7 Expands UK and Ireland Channel Presence Through Strategic Partnership with Exclusive Networks

Culture

Rapid7 Expands UK and Ireland Channel Presence Through Strategic Partnership with Exclusive Networks

Ross Baker's avatar

Ross Baker

Rapid7 at Black Hat USA 2026: See preemptive security in action

Detection and Response

Rapid7 at Black Hat USA 2026: See preemptive security in action

Emma Burdett's avatar

Emma Burdett

KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails

Vulnerabilities and Exploits

KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails

Rapid7 Labs's avatar

Rapid7 Labs

Rapid7 named a Leader in the IDC MarketScape: Worldwide MDR Service for Midmarket 2026 Vendor Assessment

Detection and Response

Rapid7 named a Leader in the IDC MarketScape: Worldwide MDR Service for Midmarket 2026 Vendor Assessment

Rapid7's avatar

Rapid7

Metasploit Framework 6.5 Released

Products and Tools

Metasploit Framework 6.5 Released

The Metasploit Team's avatar

The Metasploit Team

Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)

Vulnerabilities and Exploits

Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)

Rapid7's avatar

Rapid7

CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity

Vulnerabilities and Exploits

CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity

Rapid7's avatar

Rapid7