Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetMenu jet-menu allows Stored XSS.This issue affects JetMenu: from n/a through 3.0.5.

In Part 1 of this series, we looked at the security challenges created by fragmented, campus-by-campus environments. Higher education also faces a second pressure that makes that fragmentation harder ...

The UnitechPay WordPress plugin through 1.0.6.3 does not verify the authenticity of the payment notifications it receives, allowing unauthenticated attackers to mark orders placed through it as paid ...

The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.3. This is due to the software allowing users to execute an ...

BOSTON — March 26, 2026 — Rapid7, Inc. (NASDAQ: RPD), a global leader in AI-powered managed cybersecurity operations, announced it has acquired Kenzo Security, an agentic AI security platform built to ...

The operational reality: A new attack surface How agent activity fits existing security operations How security teams can prepare for agent-to-agent communication Build agent security into the SOC ...

In the Ransomware Radar Report, Rapid7 Labs researchers conducted independent research and analyzed data samples from Rapid7’s incident response teams to uncover trends in attacker behavior that could ...

The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report Patch management is the process of distributing and applying updates to software. These patches are often ...

The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report Open Source Intelligence is the practice of collecting, analyzing, and making decisions based on publicly ...

The scan coverage of a network vulnerability scanner is crucial to not want to miss any vulnerabilities left open to attack due to blind spots. This extends to a scanner’s responsiveness to and ...

Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to ...

CVSS 3.1 Base Score: 9.3 CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L) With curated Threat Intelligence, you can see which vulnerabilities truly put ...