rapid7

CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products

On October 5, 2026, Atlassian published a security advisory for CVE-2026-21589, a critical arbitrary file access vulnerability affecting eight products: Bitbucket Data Center, Confluence Data Center, ...
rapid7

Securing Agent-to-Agent Communication: The Next Identity Frontier

The operational reality: A new attack surface How agent activity fits existing security operations How security teams can prepare for agent-to-agent communication Build agent security into the SOC ...
rapid7

CVE-2026-58865: Improper Restriction of Operations within the Bounds of a Memory Buffer

In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additional execution ...
rapid7

CVE-2026-92767: Improper Neutralization of Input During Web Page Generation

The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode Attribute in all versions up to, and including, 2.0.5 due to insufficient input ...
rapid7

CVE-2026-35273: Missing Authentication for Critical Function

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management). Supported versions that are affected are 8.61 and 8.62. Easily ...
rapid7

Rapid7 Acquires Kenzo Security to Accelerate Preemptive, AI-Powered Security Operations

BOSTON — March 26, 2026 — Rapid7, Inc. (NASDAQ: RPD), a global leader in AI-powered managed cybersecurity operations, announced it has acquired Kenzo Security, an agentic AI security platform built to ...
rapid7

Higher education is under siege, and fragmented security is making it harder to respond

Why is higher education so difficult to secure? Why multi-campus fragmentation increases cyber risk What should university systems change? Higher education faces a difficult security equation.
rapid7

CVE-2026-55252: URL Redirection to Untrusted Site

OpenRun is an open-source, self-hosted GitOps platform for deploying web apps and internal tools to Docker or Kubernetes. Prior to version 0.17.7, the restrictions on redirect URLs in openrun can be ...
rapid7

CVE-2026-97267: miniOrange Prevent files / folders access: Subscriber Broken Access Control in Prevent files / folders access <= 2.6.7 versions.

CVSS 3.1 Base Score: 4.3 CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) With curated Threat Intelligence, you can see which vulnerabilities truly put ...
rapid7

Patch Management: What It Is & Best Practices

The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report Patch management is the process of distributing and applying updates to software. These patches are often ...
rapid7

The Ransomware Radar Report

In the Ransomware Radar Report, Rapid7 Labs researchers conducted independent research and analyzed data samples from Rapid7’s incident response teams to uncover trends in attacker behavior that could ...