5 reasons to adopt a Zero Trust security strategy for your business

Adopting Zero Trust security for your enterprise is no longer a wish-list item—it’s a business imperative. The workplace today extends to almost anywhere, anytime, from any device. Siloed, patchwork security solutions leave gaps that threat actors continue to exploit. A comprehensive Zero Trust...

5 reasons to adopt a Zero Trust security strategy for your business

Adopting Zero Trust security for your enterprise is no longer a wish-list item—it’s a business imperative. The workplace today extends to almost anywhere, anytime, from any device. Siloed, patchwork security solutions leave gaps that threat actors continue to exploit. A comprehensive Zero Trust...

Accountant ordered to pay ex-employer after bossware shows "time theft"

The case of Karlee Besse, an accountant in British Colombia, was recently dismissed by the Civil Resolution Tribunal CRT in Canada, with a judge ordering her to pay back her former employer, Reach CPA, for "engaging in time theft"--a revelation that wouldn't have been possible if not for software...

Rapid7 Recognized as a Top Place to Work for 11th Consecutive Year

On November 30th, 2022, Rapid7 was again recognized by The Boston Globe as a Top Place to Work in Massachusetts. This marks the 11th consecutive year Rapid7 has made the list, this time coming in at 3 in the large company category. Top Places to Work rankings are based on a Globe survey that...

Slack’s and Teams’ Lax App Security Raises Alarms

New research shows how third-party apps could be exploited to infiltrate these sensitive workplace tools...

CVE-2022-29490

Improper Authorization vulnerability exists in the Workplace X WebUI of the Hitachi Energy MicroSCADA X SYS600 allows an authenticated user to execute any MicroSCADA internal scripts irrespective of the authenticated user's role. This issue affects: Hitachi Energy MicroSCADA X SYS600 version 10 t...

CVE-2022-29490

CVE-2022-29490 affects Hitachi Energy MicroSCADA X SYS600 Workplace X WebUI, with versions 10 through 10.3.1 vulnerable to an Improper Authorization: an authenticated user can execute internal scripts irrespective of role. Connected sources document this vulnerability and cite affected versions; ...

Hitachi Energy MicroSCADA X SYS600 安全漏洞

Hitachi Energy MicroSCADA X SYS600 is a SCADA product from Hitachi Japan. It ensures optimal control and reliable operation of your switching station through seamless integration and connectivity between different devices and systems. A security vulnerability exists in Hitachi Energy MicroSCADA X...

PT-2022-19656 · Hitachi Energy · Microscada X Sys600

Name of the Vulnerable Software and Affected Versions: Hitachi Energy MicroSCADA X SYS600 versions 10 through 10.3.1 Description: An Improper Authorization issue exists in the Workplace X WebUI of the Hitachi Energy MicroSCADA X SYS600, allowing an authenticated user to execute any MicroSCADA...

CVE-2022-29490

Improper Authorization vulnerability exists in the Workplace X WebUI of the Hitachi Energy MicroSCADA X SYS600 allows an authenticated user to execute any MicroSCADA internal scripts irrespective of the authenticated user's role. This issue affects: Hitachi Energy MicroSCADA X SYS600 version 10 t...

Slack flaw exposed users' hashed passwords

Slack, the workplace communication platform, has notified some of its users that their hashed passwords have been subject to exposure for the last five years. The company wasnt specific in its notice, but Wired said that the flaw was in one of its "low-friction features". The flaw exposed hashed...

Creating an Exceptional Workplace: Building and Expansion in a Post-COVID World

Since its launch in 2011, Rapid7 UK has been on a mission to build a strong footprint in the region. Today, the company is celebrating the opening of its newly expanded and designed Reading office, located in the Thames Valley District at Forbury Place. This new location was selected to reflect...

The Forecast Is Flipped: Flipping L&D to Ensure Continuous Growth

At Rapid7, we staunchly believe that our people are central to upholding our mission and embodying our core values to ultimately drive our customers into a more secure future. For this reason, Rapid7 works tediously to ensure that our Moose have ample opportunities to learn and grow in their...

Rapid7 Belfast Recognized for “Company Connection” During COVID-19 Pandemic

Irish News has recognized Rapid7 in its Workplace and Employment Awards, where we’ve taken home the trophy for Best Company Connection. Reflecting on the past two years, this award recognizes the organization that best demonstrates how it has adapted its workplace well-being strategy to the...

Malicious code in @bmw-ispi-workplace/dms-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8225121478916753a7c4168f947d3bfcf9e5be59125debea55a95c13a362c5eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bmw-ispi-workplace/dms-impl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6898e8320468b4c586b03d0d2846a7e478816d08de35b21e51f3c6bc1d3a1324 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-136 Malicious code in @bmw-ispi-workplace/dms-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8225121478916753a7c4168f947d3bfcf9e5be59125debea55a95c13a362c5eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-137 Malicious code in @bmw-ispi-workplace/dms-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59ec35dcfc0b2d32da685f5d8303bb67b2568f0756ee74af7241c1a2a1d917fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The Future of Executive Protection is Digital

Physical threats against executives are on the rise. Intensified by unprecedented societal tension, pandemic fatigue, and the economic crisis, corporate leaders are being confronted and assaulted, their vehicles vandalized, and their homes invaded. A 2021 study by the Center for Protective...

The future of compliance and data governance is here: Introducing Microsoft Purview

The worldwide shift to a hybrid workplace has pushed us all to embrace ubiquitous connectivity. Those new connections have helped us become more collaborative; routinely editing and sharing documents in real-time from wherever we happen to be working. Instant messaging went from being a tool of...