A critical vulnerability in the Metasploit Framework Web Service allows unauthenticated users to read, modify, or delete stored credentials without any authentication checks.
Rapid7 has released a new collection of diverse Metasploit modules, expanding the framework’s capabilities for security testing and vulnerability research.
Christiaan Beek of Rapid7 Intelligence discusses how the BPFDoor malware uses magic packets to evade detection on mail gateways and telecom infrastructure.