SantaStealer stuffs credentials, crypto wallets into a brand new bag All I want for Christmas … is all of your data Cyber-crime16 Dec 2025 | 2
OnePlus leaves researchers on read over Android bug that exposes texts Updated Rapid7 warns flaw could let any app peek at your SMS, but smartphone vendor won't pick up Security23 Sep 2025 | 11
You think ransomware is bad now? Wait until it infects CPUs RSAC Rapid7 threat hunter wrote a PoC. No, he's not releasing it Research11 May 2025 | 64
Critical PostgreSQL bug tied to zero-day attack on US Treasury High-complexity bug unearthed by infoseccers, as Rapid7 probes exploit further Research14 Feb 2025 | 22
With ransomware whales becoming so dominant, would-be challengers ask 'what's the point?' Fewer rivals on the scene as big-gang success soars Research21 May 2024 | 3
JetBrains is still mad at Rapid7 for the ransomware attacks on its customers War of words wages on between vendors divided Patches12 Mar 2024 | 12
JetBrains TeamCity under attack by ransomware thugs after disclosure mess More than 1,000 servers remain unpatched and vulnerable Cyber-crime07 Mar 2024 | 11
Rapid7 throws JetBrains under the bus for 'uncoordinated vulnerability disclosure' Updated Exploits began within hours of the original disclosure, so patch now Patches05 Mar 2024 | 37
Rapid7 prepares to toss 18% of workforce to cut costs Operating expenses almost as high as actual turnover in latest quarterly numbers Security09 Aug 2023 | 5
Twitter whistleblower Peiter 'Mudge' Zatko lands new gig at Rapid7 Updated A long way from password crackers for Windows NT for former L0pht legend Security05 Jan 2023 | 6
Make sure you're up-to-date with Sonicwall SMA 100 VPN box patches – security hole exploit info is now out Nothing like topping off unauth'd remote code execution with a su password of ... password Security11 Jan 2022 | 1
Rapid7 says Computer Misuse Act should include 'good faith' infosec research exemption Security biz publishes plans for law reforms Security03 Sep 2021 | 11
Hack a small airplane? Yes, we CAN (bus) – once we physically break into one, get at its wiring, plug in evil kit... DEF CON PASSENGERS IN PERIL? CRISIS IN THE SKIES? No – but neat ways to frig with your own aircraft Security30 Jul 2019 | 36
Swiss banking software has Swiss cheese security, says Rapid7 Researchers go public after BPC Banking's long silence on SQL injection bug Security12 Oct 2017 | 16
VoIP bods Fuze defuse triple whammy of portal security vulnerabilities Researchers using the service found a bunch of flaws Security23 Aug 2017 |
Rapid7 slurps security orchestration biz Komand When a problem comes along, you must whip it. Without having to get off your chair On-Prem19 Jul 2017 |
Network Management Systems are a 'treasure map' for hackers Payroll printer, HR's server - wahey... jackpot! Security07 Sep 2016 | 10
Forget card skimmers, chip-card shimmers will be your next nightmare Black Hat Account-sniffing Raspberry-Pi-powered kit hidden in cash-machine slots Security03 Aug 2016 | 21
Osram's Lightify smart bulbs blow a security fuse – isn't anything code audited anymore? Four unpatched bugs remain after nine found Security27 Jul 2016 | 34
Millions of 'must be firewalled' services are open to the entire internet – research 15m telnet nodes, 4.5m printers, TCP port 445... Security08 Jun 2016 | 24
Advantech authentication forgets the authentication part Industrial gateways also carry a debugging backdoor Security19 Jan 2016 | 4
How to log into any backdoored Juniper firewall – hard-coded password published Did the NSA knacker ScreenOS? Probably not Security21 Dec 2015 | 45
Rapid7 inhales cloudy machine data search firm Logentries Metasploit maker goes deeper into compliance Security14 Oct 2015 |
HP perfomance monitor can climb through Windows Crimp nasty privilege escalation bug by running it in Linux instead says Rapid7 Security11 Oct 2015 | 7
IoT baby monitors STILL revealing live streams of sleeping kids The hacker that rocks the cradle Security03 Sep 2015 | 32
HACKERS can DELETE SURVEILLANCE DVRS remotely – report Updated Hikvision devices wide open to hacking, claim securobods Security21 Nov 2014 | 11
Is your home or office internet gateway one of '1.2 MILLION' wide open to hijacking? Doublecheck your NAT-PMP settings now Security22 Oct 2014 | 13
THREE QUARTERS of Android mobes open to web page spy bug Metasploit module gobbles KitKat SOP slop Security16 Sep 2014 | 30
Enterprise giant SAP's systems take a probe to the wobbly bits - report Penetration-testing securo-boffins show how hackers target corporate software Channel13 Nov 2013 | 7
IPMI in Supermicro servers vulnerable says HD Moore Metasploit founder flays firmware, finds flaws Security07 Nov 2013 | 1
Metasploit creator seeks crowd's help for vuln scanning Project Sonar combines tools, data and research Security30 Sep 2013 | 7
Vulns 'like a hacker camped in the server room' all across the net So says Metasploit man. Unless our servers have been hacked, anyway Security04 Jul 2013 | 8
Embedded systems vendors careless says Metasploit author AusCERT 2013 'Own five percent of the Internet without even blinking' Security22 May 2013 | 6
Serial killer hack threat to gas pipes, traffic lights, power plants Analysis 'You could shut down the electricity grid' warns security biz Security29 Apr 2013 | 39
UPnP scan shows 50 million network devices open to packet attack Lock down now to avoid getting Plug and Pwned Security29 Jan 2013 | 42
Hackers squeeze through DVR hole, break into CCTV cameras Miscreants can copy, delete streams and even control the device Security29 Jan 2013 | 45