4 min
InsightVM
Monitor External and Remote Workforce Assets in Your Environment
In order to help our customers better track their remote workforce and external assets, we are introducing a new customizable dashboard within InsightVM.
2 min
Metasploit
Metasploit Wrap-Up: 6/12/20
Windows BITS CVE-2020-0787 LPE in the Metasploit tree!
This week, Grant Willcox presents his first
Metasploit module contribution
as part of our team.
Research from itm4n
yielded CVE-2020-0787
, describing a vulnerability in
the Windows Background Intelligent Transfer Serv
4 min
COVID-19
Support FAQs: Managing Your Organization’s Security in Response to COVID-19
To help you and your organization respond to the COVID-19 pandemic, we’ve assembled a list of FAQs to help maintain your existing security measures.
5 min
Vulnerability Management
How Team Collaboration Can Help You Scale Vulnerability Management
In this blog post, we’ll break down how to do this through team collaboration, key processes, and good security design.
3 min
Vulnerability Management
Patch Tuesday - June 2020
June 2020's Microsoft Patch Tuesday
gives us a whopping 129 CVEs patched (excluding Adobe Flash which addresses
CVE-2020-9633
-- a high severity remote code execution vulnerability). While the consistently
high volume of vulnerabilities being addressed each month is alarming at times,
there is a sense of peace in the steps Micros
6 min
Managed Detection and Response (MDR)
Maturing Your Security Posture: Around-the-Clock Threat Detection With Managed Detection & Response (MDR) Services
Recently, we sat down with Jeremiah Dewey, Rapid7’s VP of Managed Services, to chat about how MDR services strengthen traditional security products.
2 min
Metasploit Weekly Wrapup
Metasploit Wrap-Up: 6/5/20
vBulletin, WordPress, and WebLogic exploits, along with some enhancements and fixes.
3 min
Security Operations
Confessions of a Former CISO: Shaming People for Bad Security
In this edition of Confessions of a Former CISO, Scott King shares some hard lessons he's learned about shaming others for their security.
3 min
SOAR
Amplifying Impact to Reduce Friction: A Guide to Security Team Efficiency
In this blog, Rapid7 product leaders offer advice on how to free up security teams to address critical threats and eliminate repetitive tasks.
5 min
InsightVM
Custom Policy Builder Is Now Available in InsightVM
In today’s policy customization post, we focus on Center for Internet Security (CIS) policies.
2 min
Rapid7 Perspective
Standing Together: A Public Statement from Rapid7 CEO Corey Thomas
It has been shocking for many people in the United States and around the world to see the stark racial injustice and inequality that still exists in the US.
2 min
Research
Rapid7 Quarterly Threat Report: 2020 Q1
In this blog, we break down some of the top findings and highlights from the Rapid7 Quarterly Threat Report: 2020 Q1.
2 min
Threat Intel
Leaked YouTube Credentials Growing in Popularity on Dark Web Forums
Rapid7 researchers have observed a new trend in black markets and cybercrime forums: stolen credentials for prominent YouTube accounts.
2 min
Metasploit Weekly Wrapup
Metasploit Wrap-Up: 5/29/20
Hello, World!
This week’s wrapup features six new modules, including a double-dose of Synology
and everyone’s favorite, Pi-Hole.
Little NAS, featuring RCE
Synology stations are small(ish) NAS devices, but as Steve Kaun, Nigusu
Kassahun, and h00die have shown, they are not invulnerable. In the first module,
a command injection exists in a scanning function that allows for an
authenticated RCE, and in the second, a coding feature leaks whether a user
exists on the system, allowing for brute-forc
3 min
Remote Working
Assessing Our New Security Landscape: Business Continuity Amid Shifting Priorities
In this installment of our Remote Work Readiness Series, Rapid7 taps security leaders on how how to maintain continuity in a changing security landscape.