Rapid7

🔎 An MDR alert recently pointed Rapid7 to an exposed server acting as a fully operational malware delivery lab. The exposed infrastructure showed how the operator tested delivery paths, packaged lures, staged payloads & more – all with the help of genAI: r-7.co/3RnpqLC

🚨 On 7/17/26, a #GitHub Security Advisory was published for CVE-2026-63030 – a critical unauth. RCE vuln. in #WordPress Core. No valid account or user interaction is required, and successful exploitation may result in full website compromise. Read on: r-7.co/4b3ilXv

📍🎩 Next stop: Vegas. From August 4-6, connect with our team of Rapid7 experts at #BHUSA 2026! Get to know Preemptive Security. Schedule an expert-led demo, find Happy Hour details, and more booth details here: r-7.co/4wMhoLA

🚨 On 7/14/26, #SonicWall published a security advisory on 2 vulns affecting SMA1000 Series remote access appliances – CVE-2026-15409 and CVE-2026-15410. Find mitigation guidance, IoC's and more in our blog: r-7.co/3RfzZ3i

In conducting a 0-day research project against #SharePoint, Rapid7 Labs discovered 2 new vulns that, when chained together, achieve RCE against a vulnerable server. Today, Rapid7 and Microsoft are disclosing CVE-2026-55040 – the first vuln in this chain: r-7.co/4f2HpQO

Threat actors are integrating AI into their exploit chains. Rapid7's Red Team is doing the same. A newly formalized multi-agent system follows our pen testing methodology end-to-end – from scoping an engagement to validating findings & generating reports: r-7.co/4y2fZlp

During a recent private sector consultation with the White House, Corey Thomas and Sabeen Malik presented Rapid7’s new policy paper: Modernizing Global Vulnerability Standards. Get the full picture in our latest blog, and find a download link within: r-7.co/3Rb0sPw

🔎 In a special episode of Hacktics & Telemetry, your hosts (@fulmetalpackets and @_CryptoCat) dedicate the entire runtime to the story of how @brutecat made +$500K in bug bounties hacking Google's core. ▶️ YouTube: r-7.co/4uHQaUG 🎧 Spotify: r-7.co/4eqmIN2

The security environment is changing faster than today's operating model. That means the operating model needs to change. 👉 Get Rapid7's latest eBook – Preemptive Security: From Resilience to Action. Find a download link in our blog: r-7.co/4xDrVK3

Rapid7 researchers have identified a sophisticated malware campaign attributed to the threat actor #DroppingElephant, characterized by the use of a China-themed decoy document to deliver a heavily reworked, in-memory RAT. Technical analysis, IoCs & more: r-7.co/4va2vSF

🚨 On 6/10/26, #Oracle published a security alert for CVE-2026-35273, a critical vuln. affecting PeopleSoft Enterprise PeopleTools. The campaign has been attributed to the ShinyHunters collective, well known for data theft and extortion. More in our blog: r-7.co/4aEClz9

AI is actively embedding itself into today's criminal tradecraft – lending itself to social engineering, fraud, impersonation, identity abuse & more. Get to know tools like WormGPT and BruteforceAI, plus, how orgs should react, all in a new blog: r-7.co/4ooQFS7

🚨 On 6/9/26, #Ivanti published a security advisory for 2 critical vulns affecting Ivanti Sentry (FKA MobileIron Sentry). CVE-2026-10520 (CVSS 10.0) is an OS command injection vuln, and CVE-2026-10523 (CVSS 9.9) is an authentication bypass vuln. Read on: r-7.co/4arpQHd

Rapid7 is joining @Anthropic’s Project Glasswing, gaining access to Claude Mythos Research Preview. We will explore internal use cases across product security, vuln research, red-teaming, and D&R – building on our focus of AI-powered, preemptive security: r-7.co/4e1qwEi

👾 In Hacktics & Telemetry, Ep7, @fulmetalpackets and @_CryptoCat break down expensive AI operational blunders, a grueling race against vendor patches, and a critical 0-day vuln in self-hosted Git software. 🎤 Spotify: r-7.co/4oi7s9u ▶️ YouTube: r-7.co/4oiOmQL

🚨 On 6/8/26, #CheckPoint published an advisory for a critical vuln. affecting its Remote Access VPN, Mobile Access & Spark Firewall products. CVE-2026-50751 allows an unauth. attacker to establish a VPN session without providing valid credentials. More: r-7.co/4fyoJJc

⚠️ In conducting a 0-day research project against an #HP Poly VVX 450 VoIP phone, Rapid7 Labs discovered CVE-2026-0826 – a critical unauthenticated stack-based buffer overflow vuln affecting all VXX series and 3 Trio IP Conference series models. Read on: r-7.co/4wQuXul

#PaloAltoNetworks published a security advisory for CVE-2026-0257. Exploitation of this vulnerability allows a remote unauthenticated attacker to establish a VPN connection through the GlobalProtect gateway of an affected appliance. More via our blog: r-7.co/4uzDIao

Headed to #GartnerSEC next week? Meet up with Rapid7 at Booth #909! Don't miss our featured session – in The CISO's Role in Enterprise Transformation, Rapid7 leaders offer their candid perspectives on embedding security into the fabric of the business: r-7.co/4x2G4jV

Found an unpatched RCE in Gogs 👀 Any authenticated user can get code execution on the server through argument injection into git rebase. Full @rapid7 writeup + @metasploit module available now! 🔗rapid7.com/blog/post/ve-a…