Relentless offense and tireless defense. It's a winning recipe in hockey, cybersecurity, and beyond 🏆
@RayBourque77
recently stopped by our Boston HQ – and clearly, he's made himself right at home. See how Rapid7 and
#77
are commanding the attack surface together ⤵️
We are thrilled to announce that today, the
@NHLBruins
named Rapid7 as their first-ever jersey patch partner and the official cybersecurity partner of the Bruins and
@tdgarden
– beginning with the 2022-23 season.
Read the release here:
The
@owasp
Top 10 API Security Risks 2023 has arrived! In a new blog, we dig a little deeper into each item on the list – a key component of API security preparedness for the year.
Read on:
Happy 25th scan-iversary,
#Nmap
! 🎉 September 1, 1997 was the day Fyodor's Nmap was released to the world. Check out a quick blog post from Rapid7 Director of Research,
@todb
on the impact of 25 years of Nmap:
🚨 Rapid7's ETR team has begun responding to CVE-2023-27997, a critical RCE vulnerability in Fortinet Fortigate SSL-VPN firewalls.
Fortinet is expected to publish their advisory tomorrow, June 13, 2023. Find mitigation advice & more in our blog:
You asked, we deliver: Register for the
@Metasploit
community CTF to hack the Linux version of Metasploitable3 (and win prizes). 500 spots. Play starts Monday!
On July 18, Citrix published a security bulletin warning of 3 new vulnerabilities affecting NetScaler ADC and NetScaler Gateway.
CVE-2023-3519, an RCE vulnerability and the most severe of the 3, is known to be exploited in the wild.
More in our blog:
One of
@Metasploit
's strengths is the ability to offer a lingua franca for expressing vulns and exploits.
@todb
underscores this point with a
#HaXmas
story
The rumors are true: Rapid7's
@PDXbek
is hosting a Threat Intelligence Book Club! We’ll be digging into The Cuckoo’s Egg starting 2/21. Details and registration here:
🛡️ New emergent threat response: "CVE-2022-41080, CVE-2022-41082: Exploitation of 'OWASSRF' in Exchange for RCE". Details and mitigation guidance in our blog below:
CVE-2022-42889, which some have begun calling “Text4Shell,” is a vulnerability in the popular Apache Commons Text library that can result in code execution when processing malicious input.
Read more & find mitigation guidance ⤵️
Each year, Rapid7 penetration testers complete hundreds of internally and externally based penetration testing service engagements. Check out our five-part blog series featuring testimonials of what goes on beneath the hoodie.
Internet researchers, security scholars, and data nerds, have we got something for you! Today we’re unveiling our National/Industry/Cloud Exposure Report (NICER), a data-rich analysis of risk across the internet complete with actionable security advice.
Whether you’re just getting started with
#pentesting
, or simply interested in the basics, this blog for you. Guest author Bo Weaver walks through how to create a secure and portable Kali installation:
Thanks to
@RandomDhiraj
for finding and disclosing a Code Execution issue on the Nexpose installer, which we were able to remediate quickly thanks to this report.
We just opened our newest Rapid7 office in Arlington, VA! The Arlington office is inspired by video game platforms and is also home to our security operations center (SOC), where our hardworking team detects and responds to security issues.
Rapid7 researchers discovered 2 high-severity vulnerabilities that, when successfully exploited, can grant attackers persistent root access to F5 device management interfaces.
More from
@TheHackersNews
:
We conducted 268 penetration testing service engagements. In this post, we review interesting detection trends, including exactly where our red team found success.
The start of a new data model for
@Metasploit
: The team landed the beginning of a nifty new backend service for Framework users this week—plus, a windfall of modules and several open roles!
New emergent threat response: "CVE-2022-42475: Unauthenticated Remote Code Execution Vulnerability in FortiOS; Exploitation Reported." More details in the blog post ⤵️
We’re thrilled to announce plans for our new global headquarters at The Hub on Causeway, where we’ll continue to build a fantastic experience for employees and invest in the
#Boston
community as we grow.
Yesterday, Microsoft published CVE-2022-24527, a local privilege escalation vulnerability in Microsoft Connected Cache. Read more about exploitation and remediation in this blog write up from
@Junior_Baines
:
A new research paper from Metasploit and Rapid7 Labs looks at practical exploitation of Java serialization vulnerabilities and internet exposure of Java services.
Securing IoT devices? Be warned that Universal Asynchronous Receiver Transmitter (UART) ports are often the keys to the kingdom. IoT Research Lead
@Percent_X
talks about the security impact of easily accessible UART on IoT technology:
💡 Introducing Fetch Payloads to
@Metasploit
!
These simplify & replace some command stager use cases, providing for faster, more intuitive command injection module dev'pment – and offering a useful on-the-fly hacking tool. More in a brand new blog:
Rapid7's Metasploit Framework research team has noticed a marked increase in both CVEs and exploit module PRs for Java serialization vulnerabilities. Security researchers
@_surefire_
and
@jhartftw
delve into exploitation of Java Serialized Objects.
The OWASP Top 10 is regarded as the single source of truth for the most common application security risks we see in today’s environments. Tune in for this
#AppSec
101 topic in this week’s
#WBW
.
Whether you’re just getting started with
#pentesting
, or simply interested in the basics, this blog for you. Guest author Bo Weaver walks through how to create a secure and portable Kali installation:
Today, we brought together our Boston and Cambridge teams at our brand new headquarters, right next to TD Garden. We're so excited to work and collaborate in this awesome new space!
AppDomain Manager Injection can be a very powerful technique for red teams – operators can package DLLs in initial access payloads, perform lateral movement, and even utilize it for persistence. 🛡
Learn the basics in a new blog:
At Rapid7, we condemn racial injustice and inequality and call upon our colleagues and communities to advocate for change together. CEO Corey Thomas shares his thoughts.
📣 Today, we're pleased to announce the release of
@metasploit
Framework 6.4!
Additional Kerberos capabilities, new session types, improved discoverability & much more – dive into the range of enhancements our team has made in a brand new blog:
In 2017, Rapid7 released more than 6 TB of internet scan data from Project Sonar to the public via . Get an overview of Sonar here, and then dig into the data yourself.
We're excited to announce the release of
@velocidex
Version 0.6.5, highlighted by better error handling in VQL, multi-lingual localization and table transformations!
Learn more and find out how to join the growing Velociraptor community here: