Rapid7

Volume 342, Issue 4 · 7 articles from 4 issues

In This Issue

• Identity-as-a-Service: Uncovering Dark Web Marketplaces Trading Executive SSNs
• DPRK APTs: Ted Backdoor and curlRAT Target South Korean Media and Automotive Sectors
• The Fraud Ecosystem: A Transition From Known Marketplaces to a Fragmented Environment
• Credentialed Pre-Port Discovery: Don't Probe the Host, Ask It
• Metasploit Wrap Up: This One Goes to Sixteen!
• When Business Email Compromise Starts Rewriting Reality
• How Dynamic Application Security Testing Validates Risk at Runtime

Identity-as-a-Service: Uncovering Dark Web Marketplaces Trading Executive SSNs (Rapid7, Thursday, August 27th, 2026)

Rapid7 investigates dark web marketplaces selling executives' Social Security numbers, a permanent form of exposure. Read more

DPRK APTs: Ted Backdoor and curlRAT Target South Korean Media and Automotive Sectors (Rapid7, Friday, September 4th, 2026)

Rapid7 Labs documents a stealthy Linux toolkit used by DPRK-linked actors against South Korean automotive and media firms. Read more

The Fraud Ecosystem: A Transition From Known Marketplaces to a Fragmented Environment (Rapid7, Friday, September 11th, 2026)

The underground fraud economy is splintering from big marketplaces into specialized Fraud-as-a-Service shops. Read more

Credentialed Pre-Port Discovery: Don't Probe the Host, Ask It (Rapid7, Wednesday, September 9th, 2026)

Authenticated scans can query a host for its open ports instead of inferring them through network probing. Read more

Metasploit Wrap Up: This One Goes to Sixteen! (Rapid7, Friday, September 11th, 2026)

Sixteen new modules including ten exploits, five of them for CISA Known Exploited Vulnerabilities entries. Read more

When Business Email Compromise Starts Rewriting Reality (Rapid7, Wednesday, September 23rd, 2026)

Rapid7 and Zimbra research found 50+ vulnerabilities letting attackers impersonate senders and rewrite inboxes without credentials. Read more

How Dynamic Application Security Testing Validates Risk at Runtime (Rapid7, Wednesday, September 23rd, 2026)

Rapid7 explains how dynamic application security testing reproduces exploits at runtime, valuable for APIs and AI-backed applications. Read more

More from Rapid7 · All section posts · This week