Rapid7 Launches Threat Intelligence Rules for AWS Network Firewall

Investing

Rapid7 Launches Threat Intelligence Rules for AWS Network Firewall

First seen 20 Nov 2025, 16:18 UTC • •25.4

Article Content

1 / 8

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

Rapid7 has introduced Curated Intelligence Rules for AWS Network Firewall to enhance cloud security. This solution aims to streamline the integration of threat intelligence, allowing organizations to better manage their network security rules and respond to evolving threats. The launch follows the company's Q3 Threat Landscape Report, which identified numerous campaigns exploiting software vulnerabilities.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 183d ago How this analysis works

More articles in this cluster (7)

Threat Graph

9 entities, 11 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (5)

Data Breach
Data Exfiltration
Phishing
Ransomware
T1566 - Phishing

Organization (1)

AWS

Affected Platform (2)

AWS Console
AWS Network Firewall

Tool (1)

Metasploit

Relationships

Data Breach targets AWS Console
Data Breach targets AWS Network Firewall
Data Exfiltration targets AWS Console
Data Exfiltration targets AWS Network Firewall
Phishing targets AWS Console
Phishing targets AWS Network Firewall
Ransomware targets AWS Console
Ransomware targets AWS Network Firewall
T1566 - Phishing targets AWS Console
T1566 - Phishing targets AWS Network Firewall
Metasploit related to AWS

Following this threat?

Track AWS in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Cisco FMC Vulnerabilities Under Active Exploitation Cisco's Secure Firewall Management Center (FMC) Software has two critical vulnerabilities, CVE-2026-20079 and CVE-2026-20316, that are currently being exploited by state-sponsored and ransomware actors. CVE-2026-20079, rated 10.0 on the CVSS scale, allows unauthenticated remote attackers to bypass authentication and…

Critical GitLab Vulnerabilities Exploited Within Hours of Disclosure On September 10, 2026, GitLab released patches for critical vulnerabilities CVE-2026-85706 and CVE-2026-87719. CVE-2026-85706, a path traversal flaw, allows unauthenticated users to read arbitrary files from GitLab servers, while CVE-2026-87719 enables credential theft via insecure deserialization. Both…