Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack
Microsoft shipped its largest Patch Tuesday on record, addressing 622 CVEs, more than triple the previous high. Two zero-days are under active…
Tag: Rapid7
Metasploit Module for CVE-2026-41679
Rapid7 released a Metasploit module automating the attack chain for CVE-2026-41679, enabling penetration testers to exploit the Paperclip vulnerability.
Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities
Ivanti, Fortinet, and SAP have released security patches addressing multiple critical vulnerabilities that could lead to arbitrary code execution and information disclosure.Fortinet…
Rapid7 Releases PoC for SharePoint Authentication Bypass
Rapid7 published a proof-of-concept exploit for CVE-2026-55040, a critical SharePoint authentication bypass. The PoC chains four weaknesses in the JWT token validation…