Blog

Attackers spoofed Astrana Health's own phone number to talk employees into granting access. Here is why vishing works and how to stop it.

A fake CAPTCHA tricks users into running a command, then Lunex blinds antivirus with a vulnerable AMD driver and steals browser passwords and cookies.

RatHat uses Google's Gemini to estimate victims' bank balances from stolen SMS and target the richest ones. See how it works and how to protect your phone.

Apple patched a CoreGraphics zero-day already used in targeted attacks. Here is who is affected, which versions fix it and what to do now.

Every modern enterprise depends on credentials. This is how humans, systems, and now AI, all connect to data, services, and each other securely. GitGuardian helps secure that credential layer through three connected capabilities: Detect, Remediate, and Prevent. The journey starts with detection, because organizations first need to understand what credentials exist, where they live, and what they can access. This is the first of three articles we are releasing that explain the

Citrix has released security updates for a high-severity security flaw in NetScaler ADC and Citrix NetScaler Gateway that has been exploited as part of targeted zero-day attacks. The vulnerability, tracked as CVE-2026-88779, carries a CVSS score of 8.7 out of 10.0. "CVE-2026-88779 is a memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway that can lead to denial-of-service under specific deployment conditions," Citrix said. "The issue affects cust

"Do we have it?" is only reliable if you know what you can see. Discover how to manage a vulnerability from visibility to verified remediation in your own environment.

The ticket is closed but the vulnerability is still there. Discover how ownership, due dates, ITSM integration and verification turn priorities into proven outcomes.

A long vulnerability report is not a plan. Discover how Active Risk and solution-based remediation show which action reduces the most risk, and why now.

New CVEs don't wait for your next pentest. Discover why continuous vulnerability management with Rapid7 InsightVM keeps the time between two tests under control.