⚠️ Rapid7 is reporting a Incident since 08:00 UTC

"Vulnerability Management Increased Latency"

Affects: User Interface, Data Processing

Live timeline → https://pingoru.io/providers/rapid7/incidents/12188256

#Rapid7 #Rapid7Down

AI tools that hand work to other tools can also pass along malicious instructions.

A researcher found flaws in systems used by Google, JPMo…

https://en.hacks.gr/kryfes-odigies-mporoyn-na-kanoyn-programmata-technitis-noimosynis-na-steiloyn-eyaisthita-stoicheia-exo/

#Google #Rapid7 #PromptInjection

A new BPFDoor backdoor variant and the AVERAT implant hide on telecom edge devices by posing as mail traffic. See how they work and how to hunt them.

#BPFDoor #AVERAT #Linux #Telecom #NetworkEdge #ORB #Rapid7 #CyberSecurity

CVE-2026-19072 - velociraptor
In Velociraptor, a user with the investigator role can change an internal setting that lets them run any query on the server, bypassing normal permission checks. This means…

Too many irrelevant or confusing CVEs? Use stackflag.com

#velociraptor #rapid7 #CVE #infosec

⚠️ Rapid7 is reporting a Incident since 13:51 UTC

"Command Platform Dashboard Degradition"

Affects: User Interface, User Interface

Live timeline → https://pingoru.io/providers/rapid7/incidents/11061348

#Rapid7 #Rapid7Down

The ted backdoor is DPRK Linux malware hidden inside HAProxy. It pairs with curlRAT to spy on South Korean media and automotive firms, Rapid7 reports.

#TedBackdoor #curlRAT #DPRK #APT37 #LinuxMalware #HAProxy #SouthKorea #Cyberespionage #Rapid7 #InfoSec

CVE-2026-19583 - velociraptor
In Velociraptor, the monitoring feature does not enforce the same permission checks as other tasks. This means someone who can set up a monitoring task could also trigger…

Too many irrelevant or confusing CVEs? Use stackflag.com

#velociraptor #rapid7 #CVE #infosec

N-able N-central CVSS 10.0 pre-auth RCE - on CISA KEV. Active exploitation, ~1,500 exposed. Patch HF4 now. https://intel.threadlinqs.com/threat/TL-2026-2415 #ThreatIntel #CVE_2026_86218 #CloudFlare #Rapid7