#rapid7 — Public Fediverse posts

Crypto Scammer Uses Claude Code to Process 100,000+ Phone Numbers for Victim Targeting

Indicators extracted from public reporting. Source: https://www.rapid7.com/blog/post/tr-operation-asterix-crypto-fraud-vishing-phishing/

Pulse ID: 6a84567bb4169d81fde03a81
Pulse Link: https://otx.alienvault.com/pulse/6a84567bb4169d81fde03a81
Pulse Author: CyberHunter_NL
Created: 2026-08-18 12:56:27

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #HTTP #HTTPS #InfoSec #OTX #OpenThreatExchange #Phishing #RAT #RCE #Rapid7 #bot #CyberHunter_NL

Rapid7 published full details and a PoC for CVE-2026-55040, a critical SharePoint authentication bypass that forges JWT tokens. Patch now.

#CVE202655040 #SharePoint #AuthenticationBypass #JWT #Rapid7 #PoC #Cybersecurity

https://securityonline.info/sharepoint-auth-bypass-cve-2026-55040/?utm_source=mastodon&utm_medium=jetpack_social

A Record-Breaking Patch Tuesday for June 2026

https://krebsonsecurity.com/2026/06/a-record-breaking-patch-tuesday-for-june-2026/

#InternetInformationServices #NightmareEclipse #VisualStudioCode #LatestWarnings #TheComingStorm #CVE-2026-45586 #CVE-2026-49160 #CVE-2026-50507 #SecurityTools #SatnamNarang #TimetoPatch #AdamBarnett #GreenPlasma #YellowKey #Tenable #Rapid7

Patch Tuesday, May 2026 Edition

https://krebsonsecurity.com/2026/05/patch-tuesday-may-2026-edition/

#sansinternetstormcenter #ProjectGlasswing #LatestWarnings #TheComingStorm #TimetoPatch #ChrisGoettl #Firefox150 #Anthropic #microsoft #Mozilla #google #Ivanti #Oracle #Rapid7 #apple

Notepad++ supply chain attack: Researchers reveal details, IoCs, targets https://www.helpnetsecurity.com/2026/02/03/notepad-supply-chain-attack-iocs-targets/ #government-backedattacks #cyberespionage #Don'tmiss #Kaspersky #Hotstuff #Rapid7 #China #News #Asia #APT

#Rapid7 published some analysis of #malware likely dropped through the Notepad++ issue.
One of the loaders used by the malware is built with #Microsoft Warbird, a kernel-level code protection framework used by Windows. @cirosec blogged about how this framework could be abused a while back and also published a PoC on GitHub.
I'm one of the authors of that research. We included some thoughts on detection in the article but if there's any further questions about the technique or anything, ask away :)

#notepad #chrysalis #ioc #apt #warbird

Patch Tuesday, January 2026 Edition

https://krebsonsecurity.com/2026/01/patch-tuesday-january-2026-edition/

#MicrosoftPatchTuesdayJanuary2026 #DesktopWindowManager #MicrosoftOffice #LatestWarnings #TheComingStorm #CVE-2023-31096 #CVE-2026-20805 #CVE-2026-20952 #CVE-2026-20953 #CVE-2026-21265 #CVE-2026-0628 #CVE-2026-0891 #CVE-2026-0892 #TimetoPatch #AdamBarnett #ChrisGoettl #Immersive #KevBreen #Ivanti #Rapid7

Recently fixed HPE OneView flaw is being exploited (CVE-2025-37164) https://www.helpnetsecurity.com/2026/01/08/hpe-oneview-cve-2025-37164-exploited/ #securityupdate #vulnerability #datacenter #Metasploit #Don'tmiss #Hotstuff #Rapid7 #News #CISA #HPE

Patch Tuesday: Microsoft fixes actively exploited Windows kernel vulnerability (CVE-2025-62215) https://www.helpnetsecurity.com/2025/11/12/patch-tuesday-microsoft-cve-2025-62215/ #securityupdate #PatchTuesday #TrendMicro #Don'tmiss #Immersive #Microsoft #Hotstuff #MSOffice #Windows #Ivanti #Rapid7 #News

Rapid7 strengthens security with AI-powered risk and vulnerability insights https://www.helpnetsecurity.com/2025/10/29/rapid7-ai-risk-vulnerability-intelligence/ #Industrynews #Rapid7

CVE Alert: CVE-2025-6264 - Rapid7 - Velociraptor - https://www.redpacketsecurity.com/cve-alert-cve-2025-6264-rapid7-velociraptor/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-6264 #rapid7 #velociraptor

Attackers exploited critical Fortra GoAnywhere flaw in zero-day attacks (CVE-2025-10035) https://www.helpnetsecurity.com/2025/09/26/fortra-goanywhere-zero-day-cve-2025-10035/ #enterprise #Don'tmiss #WatchTowr #Hotstuff #Fortra #Rapid7 #0-day #News

Ransomware attackers used incorrectly stored recovery codes to disable EDR agents https://www.helpnetsecurity.com/2025/09/16/akira-ransomware-disable-edr/ #endpointsecurity #credentials #enterprise #ransomware #Don'tmiss #SonicWall #Hotstuff #Huntress #Rapid7 #News #SMBs

Akira ransomware affiliates continue breaching organizations via SonicWall firewalls https://www.helpnetsecurity.com/2025/09/11/akira-ransomware-sonicwall-firewalls/ #vulnerability #ransomware #Don'tmiss #Australia #SonicWall #Hotstuff #Rapid7 #News #ACSC

«Швейцарский нож» хакера: как появился и устарел (?) Metasploit Framework

В прошлой статье мы рассказывали о HD Moore — хакере, который подарил миру фреймворк, навсегда изменивший практику пентестов. Теперь на очереди сам Metasploit: в прошлом — настоящий «швейцарский нож» пентестера, ныне — скорее вспомогательный инструмент с отдельными рабочими лезвиями. Чем был Metasploit для индустрии в нулевые, что представляет из себя сейчас, и почему пентестеры продолжают использовать его даже спустя двадцать лет? Разбираем историю эволюции легендарного фреймворка, которому в этом июле исполняется 22 года.

https://habr.com/ru/companies/bastion/articles/930906/

#metasploit_framework #история_Metasploit #инструменты_пентестера #пентест #redteam #rapid7 #hd_moore #джеймс_мур #история_ибиндустрии #как_появился_Metasploit

Microsoft pins on-prem SharePoint attacks on Chinese threat actors https://www.helpnetsecurity.com/2025/07/22/microsoft-pins-sharepoint-attacks-cve-2025-53770/ #PaloAltoNetworks #vulnerability #EyeSecurity #SentinelOne #CheckPoint #SharePoint #TrendMicro #Don'tmiss #Hotstuff #exploit #Rapid7 #China #News

Microsoft Fix Targets Attacks on SharePoint Zero-Day – Source: krebsonsecurity.com https://ciso2ciso.com/microsoft-fix-targets-attacks-on-sharepoint-zero-day-source-krebsonsecurity-com/ #Cybersecurity&InfrastructureSecurityAgency #rssfeedpostgeneratorecho #CyberSecurityNews #SharePointServer #KrebsonSecurity #KrebsOnSecurity #CVE-2025-49704 #CVE-2025-49706 #CVE-2025-53770 #CVE-2025-53771 #LatestWarnings #TheComingStorm #MicrosoftCorp #EyeSecurity #TimetoPatch #Rapid7 #CISA

Microsoft Fix Targets Attacks on SharePoint Zero-Day https://krebsonsecurity.com/2025/07/microsoft-fix-targets-attacks-on-sharepoint-zero-day/ #Cybersecurity&InfrastructureSecurityAgency #SharePointServer #LatestWarnings #TheComingStorm #CVE-2025-49704 #CVE-2025-49706 #CVE-2025-53770 #CVE-2025-53771 #MicrosoftCorp #TimetoPatch #EyeSecurity #Rapid7 #CISA

Exploits for unauthenticated FortiWeb RCE are public, so patch quickly! (CVE-2025-25257) https://www.helpnetsecurity.com/2025/07/14/exploits-for-unauthenticated-fortiweb-rce-are-public-so-patch-quickly-cve-2025-25257/ #webapplicationsecurity #vulnerability #Don'tmiss #WatchTowr #Hotstuff #Fortinet #exploit #Rapid7 #News #PoC

Microsoft Patch Tuesday, July 2025 Edition https://krebsonsecurity.com/2025/07/microsoft-patch-tuesday-july-2025-edition/ #MicrosoftPatchTuesdayJuly2025Edition #MicrosoftConfigurationManager #MicrosoftDefenderSmartScreen #LatestWarnings #SecurityTools #ImmersiveLabs #SQLServer2012 #SQLServer2016 #CVE202547178 #CVE202547981 #CVE202549695 #CVE202549696 #CVE202549697 #CVE202549702 #CVE202549719 #CVE202549740 #TimetoPatch #AdamBarnett #MikeWalters #BenHopkins #Action1 #Office #Rapid7 #adobe

Patch Tuesday, June 2025 Edition

https://krebsonsecurity.com/2025/06/patch-tuesday-june-2025-edition/

#WindowsServerMessageBlock #sansinternetstormcenter #PatchTuesdayJune2025 #ExperienceManager #CVE-2025-33053 #CVE-2025-33073 #mozillafirefox #SecurityTools #AcrobatReader #BadSuccessor #GoogleChrome #TimetoPatch #AdamBarnett #AlexVovk #SethHoyt #Action1 #Automox #Akamai #Rapid7 #WebDAV

Patch Tuesday, June 2025 Edition https://krebsonsecurity.com/2025/06/patch-tuesday-june-2025-edition/ #WindowsServerMessageBlock #sansinternetstormcenter #PatchTuesdayJune2025 #ExperienceManager #mozillafirefox #SecurityTools #AcrobatReader #BadSuccessor #CVE202533053 #CVE202533073 #GoogleChrome #TimetoPatch #AdamBarnett #AlexVovk #SethHoyt #Action1 #Automox #Akamai #Rapid7 #WebDAV

Review: Metasploit, 2nd Edition https://www.helpnetsecurity.com/2025/06/02/review-metasploit-2nd-edition/ #BinaryDefense #Metasploit #TrustedSec #Don'tmiss #Reviews #OffSec #Rapid7 #review #News #book

World's first #CPU-level #ransomware can "bypass every freaking traditional technology we have out there" — new #firmware-based attacks could usher in new era of unavoidable ransomware
Beek, #Rapid7's senior director of threat analytics, revealed AMD Zen chip bug gave him idea that highly skilled attacker could in theory "allow those intruders to load unapproved #microcode into the processors, breaking encryption at the hardware level and modifying CPU behavior at will."
https://www.tomshardware.com/pc-components/cpus/worlds-first-cpu-level-ransomware-can-bypass-every-freaking-traditional-technology-we-have-out-there-new-firmware-based-attacks-could-usher-in-new-era-of-unavoidable-ransomware

Patch Tuesday, May 2025 Edition

https://krebsonsecurity.com/2025/05/patch-tuesday-may-2025-edition/

#MicrosoftPatchTuesdayMay2025 #WindowsCommonLogFileSystem #LatestWarnings #TheComingStorm #CVE-2025-30397 #CVE-2025-30400 #CVE-2025-32701 #CVE-2025-32706 #CVE-2025-32709 #ImmersiveLabs #TimetoPatch #AdamBarnett #KevBreen #Rapid7

Patch Tuesday, May 2025 Edition https://krebsonsecurity.com/2025/05/patch-tuesday-may-2025-edition/ #MicrosoftPatchTuesdayMay2025 #WindowsCommonLogFileSystem #LatestWarnings #TheComingStorm #CVE-2025-30397 #CVE-2025-30400 #CVE-2025-32701 #CVE-2025-32706 #CVE-2025-32709 #ImmersiveLabs #TimetoPatch #AdamBarnett #KevBreen #Rapid7

⚠️ New cybersecurity threat alert!

A #Rapid7 researcher developed a Proof of Concept (PoC) #ransomware that infects #CPUs directly, bypassing traditional antivirus and surviving even hard drive replacements.

🔐💻 Read more:

🔗https://www.techradar.com/pro/security/cpu-microcode-hack-could-infect-processors-with-ransomware-directly