What’s New in Rapid7 Products and Services: Q2 2026 in Review
If Q1 set the pace for Rapid7’s tools, Q2 accelerated it. This quarter brought a steady stream of product enhancements, platform investments, and customer-driven innovation…
Category: ThreatIntelligence-IncidentResponse
CVE-2026-8933: Local Privilege Escalation in Ubuntu snap-confine
The Qualys Threat Research Unit (TRU) has identified a Local Privilege Escalation (LPE) vulnerability in snap-confine (CVE-2026-8933). This flaw allows an unprivileged local user to…
Manual Patching Can’t Outrun AI – Automated Remediation
Executive Summary AI is rapidly transforming vulnerability discovery, outpacing many security teams’ ability to adapt. Microsoft’s July 2026 Patch Tuesday addressed a record 622 vulnerabilities,…
Oracle July 2026 Critical Patch Update 1235 CVEs
Oracle addresses 1235 CVEs in its third quarterly update of 2026 with 1449 patches, including 261 critical updates. Key Takeaways The third Critical Patch Update…
Securing AI agent harness files from config attacks
Attackers have shifted from hiding from AI tools to running inside them. By poisoning the config files that govern AI coding assistants, a new worm…
SharePoint CVEs FAQ: CVE-2026-56164, CVE-2026-32201, CVE-2026-45659
Four Microsoft SharePoint Server vulnerabilities are under active exploitation, prompting CISA to issue a hardening alert. An additional high-severity flaw recently patched adds pressure for…
SonicWall CVE-2026-15409 and CVE-2026-15410 zero-day exploited
SonicWall patched two recently exploited zero-day vulnerabilities in its SMA 1000 Series secure remote access appliances which may have been chained for unauthenticated remote code…
Understanding Claude Tag’s access model in Slack
Anthropic’s new AI agent for Slack acts under an admin-configured access bundle rather than each user’s own credentials. Here’s how that model works, what admins…
July 2026 Patch Tuesday: Largest Patch Tuesday 569 CVEs
56Critical 510Important 3Moderate 0Low Microsoft addresses 569 CVEs in the largest Patch Tuesday release yet. This month’s release includes three zero-days, two of which were…
CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED)
Overview Rapid7 Labs conducted a zero-day research project against Microsoft SharePoint, resulting in the discovery of two new vulnerabilities that, when chained together, achieve unauthenticated…
Cybersecurity Awareness Month is Ending, but Holiday Threats Are Just Getting Started
“Is Die Hard a Christmas movie?” At every holiday party, without fail, someone’s going to throw that question your way. And whether you’re willing to…
Threat Actors Achieve Persistence After SQL Injection
Acknowledgments: Special thanks to the efforts of Stephanie Fairless for the contributions to this investigation. “The call is coming from inside the house.” Defenders often…