Rapid7

Volume 343, Issue 1 · 7 articles from 2 issues

In This Issue

• SMTP Is the Key: BPFDoor and AVERAT Hitting the Network Edge
• Higher Education Is Under Siege, and Fragmented Security Is Making It Harder to Respond
• How AI Is Changing the Roles Required in the Security Operations Center
• Four Compliance Frameworks, One Security Team: Why Fragmented University Security Raises Regulatory Risk
• Securing Agent-to-Agent Communication: The Next Identity Frontier
• Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules
• The ASOS Incident: When Attackers Use the Channels Customers Trust

SMTP Is the Key: BPFDoor and AVERAT Hitting the Network Edge (Rapid7, Friday, October 2nd, 2026)

Rapid7 analyzes a new BPFDoor variant, a BPF Rekoobe build and the AVERAT Linux implant targeting telecom and edge devices. Read more

Higher Education Is Under Siege, and Fragmented Security Is Making It Harder to Respond (Rapid7, Wednesday, September 30th, 2026)

Rapid7 on why universities are hard to secure and how fragmented tooling slows their response to rising attacks. Read more

How AI Is Changing the Roles Required in the Security Operations Center (Rapid7, Thursday, October 1st, 2026)

Rapid7 highlights Gartner research on how SOC roles, skills and KPIs must be redesigned as AI takes over triage work. Read more

Four Compliance Frameworks, One Security Team: Why Fragmented University Security Raises Regulatory Risk (Rapid7, Wednesday, October 7th, 2026)

Rapid7 explains how FERPA, GLBA, HIPAA and CMMC obligations make fragmented multi-campus university security a regulatory risk. Read more

Securing Agent-to-Agent Communication: The Next Identity Frontier (Rapid7, Tuesday, October 6th, 2026)

Rapid7 argues autonomous AI agents must be treated as first-class identities, with delegation, behavior and tool use monitored. Read more

Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules (Rapid7, Friday, October 9th, 2026)

This week's Metasploit release adds 12 modules, including LLM-targeting scanners, Linux LPEs and an N-able N-central RCE. Read more

The ASOS Incident: When Attackers Use the Channels Customers Trust (Rapid7, Wednesday, October 7th, 2026)

Rapid7 examines the hostile push notification sent through ASOS's own app and what attacker use of trusted channels means for defenders. Read more

More from Rapid7 · All section posts · This week