Rapid7

Today, Rapid7 Labs has released our Q1 2026 Threat Landscape Report. Our early findings show just how quickly exposed systems can become operational targets. Security teams can’t apply the same level of investigation and response across every signal when attackers are consistently prioritizing what they can reach and exploit, and it's that gap where risk accumulates. Explore the high-level takeaways in a new blog: https://r-7.co/49Ybbmw Or download the report now: https://r-7.co/43koLwV

🌐 Announcing Rapid7's Threat Landscape Report for Q1, 2026. Threat actors are favoring zero-click, network-facing vulnerabilities over social engineering, the lines blur between state actors & proxy hacktivist groups, and the underground cybercriminal economy continues to splinter amid raids. Dive into the top takeaways via our blog: https://r-7.co/49Ybbmw Or download the full report here: https://r-7.co/43koLwV

How do you automate defense without sacrificing judgment? What is the CISO's *true* role in enterprise transformation, and what would they change if it was possible to start over again? It's been a week since we put a bow on Rapid7's 2026 Global Cybersecurity Summit, but the sessions live on. On-demand, that is. 👉 So if you're still seeking answers to the above (and so much more), find links to all tracks & sessions inside our latest blog: https://r-7.co/3RkxPiF

State, local government, and public schooling practitioners: what does your Vulnerability Management strategy look like today? 🗓️ On Thursday, May 28, join Rapid7 and Carahsoft for a virtual event that answers the tough questions around program buy-in, policy hierarchies, and more. Register here: https://r-7.co/4fyPv41

So Energy delivers renewable electricity to around 300,000 UK homes. From 24/7 security operations to seamless energy solutions, 'always on' means something to them – and Rapid7 MDR fit the bill. 💡 For more on how So Energy is trusting Preemptive MDR to keep the lights on: https://r-7.co/4nzNsyF

🚨 On May 14, 2026, Palo Alto Networks published a security advisory for CVE-2026-0265 –a signature verification vulnerability that facilitates authentication bypass on PAN-OS, the operating system that most Palo Alto Networks firewalls run. Palo Alto Networks assigned CVE-2026-0265 a “High” 7.2 CVSS score. Stay up to date with our blog: https://r-7.co/438oEV7

🚨 Rapid7 Labs has discovered an authentication bypass vulnerability in #Cisco Catalyst SD-WAN Controller (formerly known as vSmart). CVE-2026-20182, which sports a Critical CVSSv3.1 score of 10.0, allows a remote unauthenticated attacker to become an authenticated peer and perform privileged operations. For our full technical analysis, remediation insights and more: https://r-7.co/4uLxSlR

In Episode 5 of Hacktics and Telemetry, your hosts Douglas McKee & Jonah Burgess talk zero-click XSS vulns (featuring Jorian W.), bug bounty updates, the 'Copyfail' exploit, and Metasploit's newly released MCP server 🔥 👉 Check out the full convo on YouTube: https://r-7.co/49wOqG9 🎧 Or head to Spotify for the audio: https://r-7.co/436KHLS

🔑 Attackers don't need to break down the front door when they can convince your employees to open it for them. Rapid7 observed a recent enterprise intrusion that began with a fake IT support Teams message, escalated via fake lock screens, Python-based RATs & a kernel exploit, then secured domain-wide credential access – all within 2 days. Find our full technical analysis of #ModeloRAT in a new blog: https://r-7.co/4npcZuB

The hard work of our Partner Academy and Partner Enablement leads has been recognized at this year's Stevie® Awards, where Rapid7 was recognized with: 🥇 Achievement in Collaboration and Partnership – Rapid7 Partner Services Certification Program 🥉 Thought Leader of The Year, Business Products – Heather DeMartini, MBA 🥉 Thought Leader of The Year, Business Services – Heather DeMartini, MBA This recognition follows similar success earlier in the year, where Rapid7 also received 🥇 in Global Customer Service Excellence, Innovation in Customer Service, and Business Development Professional of the Year categories. Read more in our latest blog: https://r-7.co/3Pccibj