What’s changing, where AttackerKB-style analysis will live, and how users can continue finding Rapid7 vulnerability intelligence. On August 18, Rapid7 will sunset the standalone public AttackerKB website as part of…
Should we let AI run our threat hunts? The debate usually splits into two camps. One says, “Yes, obviously! The sheer scale of our security telemetry is impossible for humans…
Executive Summary Cato CTRL’s Vitaly Simonovich (senior security researcher) has discovered a new vulnerability (CVE-2026-25611 with a “High” severity rating of 7.5 out of 10) in all MongoDB versions with…
Acrobat Reader Zero-Day Exploited in the Wild for Many Months A zero-day vulnerability in Adobe Acrobat Reader has been actively exploited since November 2025, and potentially earlier, as discovered by…
Anthropic’s new AI agent for Slack acts under an admin-configured access bundle rather than each user’s own credentials. Here’s how that model works, what admins should understand and how to…
Overview In the cloud, your infrastructure may be short-lived, but an attacker’s persistence doesn’t have to be. While your environment scales and changes in seconds, adversaries are embedding themselves into…
Agentic AI does not just answer, it acts. The moment an agent has a reachable control plane, you have effectively created a “remote hands” interface into your environment. In our…
Google Chrome – CVE-2026-6296 A critical heap buffer overflow vulnerability, identified as CVE-2026-6296 with a CVSS v3.1 score of 9.6, exists within the ANGLE (Almost Native Graphics Layer Engine) component…
SonicWall patched two recently exploited zero-day vulnerabilities in its SMA 1000 Series secure remote access appliances which may have been chained for unauthenticated remote code execution. Key takeaways CVE-2026-15409 and…
As the shape, speed, and scale of network traffic changes, our customers realize that their networks must rapidly accommodate more applications, more agents, more encrypted flows, more data movement, and…
