Blogsby Glyph5 of 540 posts
Fri Nov 61 post
Thu Nov 51 post
Gartner Report: The Attack Path is Closing Faster than Most Teams Can Patch
Security teams have never lacked vulnerability data. The harder problem is deciding which issues create a credible path to business impact, then acting before that path can be used.
Wed Nov 42 posts
The Race Against the 3-Day Clock: How Rapid7 Helps Meet BOD 26-04 Compliance
Introduction to BOD 26-04 On June 10, 2026, CISA issued Binding Operational Directive 26-04, "Prioritizing Security Updates Based on Risk." Strip away the regulatory language and it reads like a single operational fact: for a vulnerability...
Rapid7 Achieves ISO/IEC 42001 Certification for its AI Management System
Exciting news for AI governance! Rapid7 has achieved ISO/IEC 42001:2023 certification for our Artificial Intelligence Management System (AIMS).
Mon Nov 21 post
Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)
Overview On October 29, 2026, Ivanti updated its security advisory for Ivanti Connect Secure (ICS) to include two additional vulnerabilities and released fixes for both.