Security News

Live news from trusted publications, matched against DayBreach CVE data.

Rapid72 mo ago

What’s New in Rapid7 Products and Services: Q2 2026 in Review

If Q1 set the pace for Rapid7's tools, Q2 accelerated it. This quarter brought a steady stream of product enhancements, platform investments, and customer-driven innovation across Rapid7’s portfolio. Each release was designed with a clear goal in mind: helping security teams reduce complexity while increasing speed, context, and confidence in their day-to-day operations. Here’s a closer look at what launched in Q2.Detection and responseStreamline investigations with bidirectional and enriched Microsoft Defender alertsBidirectional synchronization and enriched alert context for Microsoft Defend

Related Companies

rapid7

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

Rapid73 mo ago

From a Single Alert to 1,000 Files: Inside an Exposed WebDAV Malware Delivery Lab

Executive summaryAn MDR alert recently led our team to an exposed server that was doing more than hosting payloads. It was functioning as a fully operational malware delivery lab. Containing over 1,000 artifacts, the infrastructure served as a QA hub where attackers systematically tested delivery paths, social engineering lures, and WebDAV execution methods.Our analysis reveals an interesting shift in adversary operations: attackers are adopting generative AI to move beyond individual exploits and operate like modern software product teams. By leveraging LLMs for rapid lure generation, detaile

Related Companies

İlgili CVE'ler

Rapid73 mo ago

CVE-2026-63030: wp2shell a Critical Remote Code Execution Vulnerability in WordPress Core

OverviewOn July 17, 2026, a GitHub Security Advisory was published for CVE-2026-63030, a critical unauthenticated remote code execution vulnerability affecting WordPress Core. While the official GitHub security advisory classifies the severity as Critical, the vulnerability has currently been assigned a CVSS score of 7.5. WordPress is one of the most widely deployed content management systems, making vulnerabilities in its core software potentially significant for organizations operating public-facing websites. The vulnerability reportedly allows an unauthenticated attacker to execute code via

Related Companies

İlgili CVE'ler

CVE-2026-60137 CVE-2026-63030

Read at the source

Rapid73 mo ago

Metasploit Wrap Up: An HTTP to SMB relay plus Payload Improvements

Metasploit Wrap Up HousekeepingWhile the Metasploit Framework will be continuing its weekly release cadence, bringing you dear reader our latest content, the Weekly Wrap Up is being shifted to a bi-weekly cadence. The team is planning to use the additional time between posts to record demos of some of the more exciting content. Stay tuned for the next generation of Metasploit Wrap Ups and be sure to subscribe to the RSS Feed to be alerted when new blogs are released.Fetch Multi: Just Fetch and Forget?Our very own bwatters-r7 continued to enhance our Fetch Payloads implementation. This time add

Related Companies