Rapid7

🎤👾 This week on Hacktics and Telemetry, Douglas McKee and Jonah Burgess take you behind the scenes of Pwn2Own – the world's premier zero-day exploitation contest. Stephen Fewer joins your hosts, sharing his firsthand experience at the competition, breaking down exactly how AI is altering the vulnerability landscape, and diving into the details of his infamous Brother printer exploits. ▶️ Full conversation on YouTube: https://r-7.co/3TUAot6 🎧 Audio experience on Spotify: https://r-7.co/4cBHMQo

🚀 97% of security teams say AI is working in the SOC. Their executives are 1.6x more skeptical. That gap in confidence between the SOC and the board is the most important finding in our new Omdia research – and the one that most AI content ignores. So what's driving it? 500 global security professionals independently weigh in. 🧵 Find the big beats in our blog: https://r-7.co/4wXzs5V 👉 Or skip to downloading the report: https://r-7.co/4wopKsc

🚨 In July 2026, while conducting a 0-day research project against Microsoft #SharePoint, Rapid7 Labs discovered 2 new vulns that, when chained together, achieve unauthenticated RCE against a vulnerable SharePoint server. Today, both Rapid7 and #Microsoft are disclosing the second vulnerability in this chain – CVE-2026-63520 – alongside a technical analysis & PoC script for CVE-2026-55040, which the two parties disclosed last month. 👉 August 2026 disclosure for CVE-2026-63520: https://r-7.co/4wVaO5T 👉 Analysis and PoC for July's CVE-2026-55040: https://r-7.co/4xEF4C5 Interested in the AI tooling that Stephen Fewer leveraged throughout the research process? Join Stephen and Douglas McKee on Thursday, August 13 to walk through the full exploit chain, actionable next steps and more. Register here: https://r-7.co/4wNKzhv

...And checkmate. As we wrap up our time at Black Hat 2026, Rapid7 would like to thank everyone who stopped by the booth, caught us at a happy hour or speaker presentation, and challenged one of our chessmasters at the game of kings ♟️ Preemptive Security is about thinking moves ahead – we're already looking forward to next year!

♟️🔥 The competition heated up at Booth #2445 yesterday. Join us again today at 10AM, 11AM, 1PM, and 2PM as our chess grandmaster returns to take on 4 of your boards at once! More on Rapid7's booth happenings here: https://r-7.co/4wMhoLA Catch a breakfast or lunch session at Border Grill: https://r-7.co/4hHLzPz

♟️ Did you make your move at the Border Grill today? While Rapid7's chessmasters – human and robot alike – run the tables at Booth #2445, there's a whole new game being played down the hall. Find us at the Border Grill tomorrow for breakfast with Lisa Washburn (10:15AM) and lunch with Jon Schipp (11:30AM). Details here: https://r-7.co/4hHLzPz

♞♛ At #BHUSA 2026, be a player... not a pawn. Today at Rapid7's Booth #2445, our chessmaster will challenge 4 separate boards at once – including one played by a classically trained robot. Join in (or spectate) at 10:45AM, 11:45AM, 2PM, 3PM & 4PM. And don't fret if you miss out! We'll announce additional slots tomorrow. More booth happenings here: https://r-7.co/4wMhoLA

Your next move at #BHUSA: Visit the Rapid7 booth. ♟️ All week, you can find us at Booth #2445 for a chess match against our robot grandmaster – and so much more! See how Rapid7 is unifying Exposure Management, D&R, and Cyber GRC into one automated, open platform. More Rapid7 @ Black Hat details here: https://r-7.co/4wMhoLA

🧑💻 Network edge devices are prime targets for initial access, but attackers often hide right inside routine admin logs. Join Rapid7 experts Eric C. and Jose R. on August 12 as they dissect a real-world #FortiGate compromise (CVE-2025-59718). Learn how to spot subtle persistence flags like rogue account creations and configuration exports before attackers pivot internally. Save your spot here: https://r-7.co/4bvHEBE

♟️ Checkmate: Think moves ahead at #BHUSA this year. Rapid7 is bringing Preemptive Security to Booth #2445 – get into your opponent’s head and anticipate that next move before they make it. Stop by for a hands-on demo, enter a giveaway, grab some swag, and say hi to our team of Rapid7 experts! 👉 New blog on all things Rapid7 @ Black Hat: https://r-7.co/4xiiu1Y 🔒 Save your spot at one of our Border Grill sessions: https://r-7.co/4hHLzPz