Silver Fox uses the new ABCDoor backdoor to target organizations in Russia and India
In December 2025, we detected a wave of malicious emails designed to look like official correspondence from the Indian tax service. A few weeks...
Training on Fiction While the Real Threat is in Your Inbox
By: Josh Bartolomie, Chief Security OfficerThe Illusion of ReadinessI have spent a good portion of my career inside and around security awareness programs, watching...
Risk Scenarios for the US’s Strategic Pivot
Summary The United States (US) is shifting toward a more force-driven security strategy primarily relying on military operations and economic pressure to counter...
Elastic Stack 8.19.15 released
Version 8.19.15 of the Elastic Stack was released today. We recommend you upgrade to this latest version. We recommend 8.19.15 over the previous versions...
Building with AI: Here’s What No Briefing Will Tell You
Executives making AI decisions without hands-on building experience have a comprehension gap that no briefing can close. AI is...
Five Things we Took Away from Gartner SRM Sydney 2026
At this year's Gartner Security and Risk Management Summit in Sydney, Rapid7 CISO Brian Castagna joined industry CISO Nigel Hedges for a fireside chat...
CVE-2026-41940: cPanel & WHM Authentication Bypass
OverviewOn April 28, 2026, cPanel issued a security update to fix a critical vulnerability affecting the cPanel & WHM and WP Squared products. In...
Designing trust and safety into Amazon Bedrock powered applications
Generative AI brings promising innovation, transforming how individuals and organizations approach everything from customer service to content creation and more. As AI...
wget2 Improper Certificate Validation
wget2 Improper Certificate Validation Tenable Research discovered that wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU). If...








