Overview Rapid7 Labs conducted a zero-day research project against Microsoft SharePoint, resulting in the discovery of two new vulnerabilities that, when chained together, achieve unauthenticated remote code execution (RCE) against…
Malware: BiBi, BiBi-Linux, BiBi-Windows Wiper, BiBi Wiper, ChillWipe, Cl Wiper, CoolWipe, DEADWOOD, Detbosit, DistTrack, GOLD IONIC, Hamsa, Handala, Handala PowerShell Wiper, Handala Wiper, Hatef, Hatef Wiper, INC, Inc. Ransom, INC…
Executive Summary Cato CTRL has identified a previously undocumented malware loader we track as “Foxveil.” We observed evidence that the malware campaign has been active since August 2025, and we observed…
56Critical 510Important 3Moderate 0Low Microsoft addresses 569 CVEs in the largest Patch Tuesday release yet. This month’s release includes three zero-days, two of which were exploited in the wild. Microsoft…
CVE-2026-50316 Windows Kernel Information Disclosure Vulnerability Exploitation Less Likely No 5.5 CVE-2026-50419 Windows Kernel Information Disclosure Vulnerability Exploitation Unlikely No 3.3 CVE-2026-50463 Windows Kernel Information Disclosure Vulnerability Exploitation Less Likely…
CVE-2026-50656: Windows Defender Patch Introduces Disk Exhaustion Vulnerability A recent patch for the Windows Defender zero-day vulnerability, RoguePlanet (CVE-2026-50656), which previously allowed remote administrative control of Windows 10 and 11,…
Jeremy, the Head of IT, thought it was a normal Monday until his help desk was overwhelmed with login complaints. 37 employees couldn’t log in. Password resets were happening that…
Gopan Sivasankaran is Regional Director, Middle East & Africa, at Rapid7 From AI adoption and cloud-first strategies to smart cities and critical infrastructure modernization, organizations across the United Arab Emirates…
The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors A new iOS full-chain exploit, dubbed DarkSword, has been identified, leveraging six zero-day vulnerabilities to fully compromise devices…
On a quiet Tuesday morning, Jerry, a fictional system administrator, logged in as usual. While testing a new integration script, he visited a documentation page on an unfamiliar domain. It…
