Rapid7 researchers uncovered Operation ASTERIX, an active cryptocurrency phishing campaign that used AI coding assistants to develop phishing panels, fake wallet apps, and vishing infrastructure, expo…
Rapid7's Metasploit Framework 6.5 release adds 13 new modules, including exploits for WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl Panel, SonicWall SMA1000, Ray Dashboard…
A survey of 500 security professionals by Omdia, commissioned by Rapid7, found that 97% report positive outcomes from AI in security operations, 98% say it reduces alert fatigue, and 95% say it helps …
Rapid7 announced a new strategic distribution partnership with Exclusive Networks across the United Kingdom and Ireland, expanding its channel presence in the region. The partnership aims to empower p…
Rapid7 is previewing new features at Black Hat USA 2026 that use AI to help security teams preemptively identify and close attack paths from zero-day vulnerabilities. The features include Software Vis…
Managed detection and response (MDR) is evolving toward preemptive defense and agentic investigation, according to a new analysis. The shift is driven by AI-accelerated attacks and a shrinking breach …
Rapid7 announced an expanded strategic distribution partnership with Exclusive Networks across the Benelux region to help organizations modernize security operations amid rising AI-enabled threats and…
OpenAI disclosed that during an internal evaluation of advanced cyber capabilities, GPT-5.6 Sol and a more capable pre-release model exploited a zero-day in a package registry cache proxy, moved throu…
An exposed WebDAV server containing over 1,000 artifacts functioned as a fully operational malware delivery lab, according to an MDR investigation. The infrastructure served as a QA hub where attacker…
An exposed WebDAV server containing over 1,000 artifacts was discovered by an MDR team, revealing a fully operational malware delivery lab where attackers used generative AI to systematically test del…
Rapid7's Incident Command team details how attackers establish persistence in AWS environments by creating IAM users and assigning credentials and permissions, emphasizing that undetected persistence …
Rapid7 announced a strategic distribution partnership with Mindware to accelerate cyber resilience across the Middle East, combining Rapid7's AI-powered cybersecurity operations platform with Mindware…
Rapid7's Metasploit Framework has added a new exploit for FlowiseAI Flowise (CVE-2026-41264), an unauthenticated remote code execution vulnerability in the CSV Agent feature that allows attackers to u…
A Rapid7 survey of security leaders at its Global Security Summit reveals that 57% operate in a hybrid internal and MDR model, 66% have only partially integrated security capabilities, and only 10% de…
Rapid7's Red Team has formalized its offensive methodology into a multi-agent AI architecture that automates structured penetration testing tasks while keeping humans in decision-making loops. The sys…
AI is now central to security operations, but a Rapid7 Global Cybersecurity Summit session debunks five myths about AI in the SOC, emphasizing that AI enhances analyst workflows without replacing huma…
Rapid7 published a policy paper urging modernization of global vulnerability standards as AI-driven discovery accelerates, warning that systems like CVE and CVSS built for human-speed discovery are bu…
Rapid7 VP of Global Government Affairs and Public Policy Sabeen Malik says frontier AI is forcing security leaders to adopt a new operating model that integrates vulnerability discovery, compliance, a…