Rapid7 Labs uncovered Operation ASTERIX, a crypto fraud pipeline that used AI coding assistants to create fake Ledger, Trezor, and Exodus apps, and matched 43,066 phone numbers to actual exchange acco…
Cybersecurity firm Rapid7 uncovered Operation ASTERIX, an AI-powered crypto phishing campaign, after finding a misconfigured server exposing approximately 885,000 phone numbers, including 316,002 Germ…
Rapid7's Operation ASTERIX uncovered a crypto phishing campaign that used AI coding tools, including GitHub Copilot and Claude Code, to build counterfeit Trezor, Ledger, and Exodus wallet apps and val…
Rapid7 announced a strategic distribution partnership with Licencias OnLine (LOL) to accelerate cybersecurity maturity across Latin America. The collaboration will focus on technical training, partner…
Rapid7 Labs' Q2 2026 Quarterly Threat Landscape Report reveals 8,539 new high- and critical-severity CVEs, double the 4,268 from Q2 2025, while exploited vulnerabilities held steady at 40, signaling t…
Rapid7 researchers uncovered Operation ASTERIX, an active cryptocurrency phishing campaign that used AI coding assistants to develop phishing panels, fake wallet apps, and vishing infrastructure, expo…
Rapid7's Metasploit Framework 6.5 release adds 13 new modules, including exploits for WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl Panel, SonicWall SMA1000, Ray Dashboard…
Tech-industry layoffs in 2026 have surpassed the total for all of 2025, reaching 126,305 by mid-August, according to the layoff tracker Layoffs.fyi. This exceeds the 122,606 jobs lost across 278 globa…
A survey of 500 security professionals by Omdia, commissioned by Rapid7, found that 97% report positive outcomes from AI in security operations, 98% say it reduces alert fatigue, and 95% say it helps …
Rapid7 and Microsoft disclosed CVE-2026-63520 on August 11, a SharePoint Server remote code execution flaw with a CVSS score of 8.1 that, when chained with July's CVE-2026-55040 authentication bypass …
DEF CON Franklin and the National Rural Water Association (NRWA) launched the Water Watch Center at DEF CON, a program that will initially fund five managed detection and response providers—Defendify,…
Rapid7 announced a new strategic distribution partnership with Exclusive Networks across the United Kingdom and Ireland, expanding its channel presence in the region. The partnership aims to empower p…
Rapid7 is previewing new features at Black Hat USA 2026 that use AI to help security teams preemptively identify and close attack paths from zero-day vulnerabilities. The features include Software Vis…
Rapid7 announced an expanded strategic distribution partnership with Exclusive Networks across the Benelux region to help organizations modernize security operations amid rising AI-enabled threats and…
OpenAI disclosed that during an internal evaluation of advanced cyber capabilities, GPT-5.6 Sol and a more capable pre-release model exploited a zero-day in a package registry cache proxy, moved throu…
Security researcher Adam Kues used OpenAI's GPT-5.6 Sol Ultra to discover a pre-authentication remote code execution chain in WordPress, dubbed wp2shell, in about 10 hours at an API cost of $25. WordP…
Microsoft's July Patch Tuesday set a record with 570 CVEs, including two zero-days under active exploitation. Meanwhile, security researchers published GhostApproval and Friendly Fire, revealing that …
Rapid7's Incident Command team details how attackers establish persistence in AWS environments by creating IAM users and assigning credentials and permissions, emphasizing that undetected persistence …
Rapid7 announced a strategic distribution partnership with Mindware to accelerate cyber resilience across the Middle East, combining Rapid7's AI-powered cybersecurity operations platform with Mindware…
Rapid7's Metasploit Framework has added a new exploit for FlowiseAI Flowise (CVE-2026-41264), an unauthenticated remote code execution vulnerability in the CSV Agent feature that allows attackers to u…