Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
UK Associate Cyber Security Professional Title: Standardizing Entry-Level Talent for SOC Teams
Introduction The UK Cyber Security Council has officially launched the "Associate Cyber Security Professional" title, a strategic move aimed...
AI-Driven MDR in 2026: Strategies for Full Telemetry Visibility and Detection Automation
Introduction In a recent episode of Rapid7’s Experts on Experts, CEO Corey Thomas highlighted a critical evolution in security operations th...
CVE-2025-59718: FortiGate SSO Login Bypass — Detection and Containment Guide
CVE-2025-59718: FortiGate SSO Login Bypass — Detection and Containment Guide Introduction Rapid7's recent Incident Response (IR) engagement ...
APT37 RokRAT Campaign: Facebook Social Engineering Detection and Hardening Guide
Introduction A recently observed campaign attributed to the North Korean threat group APT37 (also known as ScarCruft or Reaper) highlights a...
Siemens SICAM 8: CVE-2026-27663 & CVE-2026-27664 Detection and Remediation
Introduction CISA has released ICS Advisory ICSA-26-092-01 regarding critical vulnerabilities affecting multiple Siemens SICAM 8 products. T...
Insider Risk 2025: $19.5M Cost Impact and Strategic Defense Guide
Insider Risk 2025: $19.5M Cost Impact and Strategic Defense Guide Introduction The 2025 DTEX Insider Risk Report has landed, and the data is...
Rapid7 2026 Global Cybersecurity Summit: Shifting from Reactive Defense to Preemptive Security Operations
Rapid7 2026 Global Cybersecurity Summit: Shifting from Reactive Defense to Preemptive Security Operations Introduction The cybersecurity lan...
Claude Mythos and AI-Assisted Vulnerability Discovery: Strategic Defense and Risk Management
Introduction The release of Claude Mythos Preview by Anthropic marks a definitive shift in the cybersecurity landscape. Unlike incremental u...
CISA AA26-097A: Iranian APT Targeting Rockwell Automation PLCs — Detection and Defense for Critical Infrastructure OT
CISA AA26-097A: Iranian APT Targeting Rockwell Automation PLCs — Detection and Defense for Critical Infrastructure OT Introduction On April ...