Rapid7 Labs
The research team of security vendor Rapid7, publishing annual and quarterly threat landscape reports on vulnerability exploitation and attack trends for security teams.
At a glance
- Entity level
- Unit within an organisation
- Type
- Unit of a company
- Part of
- Rapid7
- Flagship output
- 2026 Global Threat Landscape Report: Decoding the Accelerated Cyber Attack Cycle (latest: 2026 Global Threat Landscape Report, 18 March 2026)
- Category
- Cyber & technology risk
- Tier
- Tier 2: Listed security vendor's research arm; annual and quarterly threat landscape reports with widely cited vulnerability data.
- Headquarters
- Boston, United States
- Coverage
- Global vulnerability exploitation, ransomware, initial access and incident response trends
- Public access
- Free
- Latest activity seen
- 18 Mar 2026
- Evidence
- Verified
How it produces intelligence
Analysis of Rapid7 MDR and incident response cases, vulnerability and KEV data, and ransomware leak-site monitoring.
Risk themes
Focus regions
Leadership
- Raj Samani, Chief Scientist
- Christiaan Beek, Vice President, Cyber Intelligence
Links
What it publishes
| Output | Type | Cadence | Latest edition | Date | |
|---|---|---|---|---|---|
| 2026 Global Threat Landscape Report: Decoding the Accelerated Cyber Attack Cycle | Threat report | Annual | 2026 Global Threat Landscape Report | 18 Mar 2026 | Read report |
| Threat Landscape Report (quarterly) | Threat report | Quarterly | Q2 2026 (per search result) | 2026 | Read report |
Latest findings
Recent public risk calls by Rapid7 Labs, summarised in our own words. They are its views, not 311's. Follow each source for the original.
Exploited high and critical severity vulnerabilities roughly doubled in 2025, rising from 71 to 146 versus 2024.
18 Mar 2026 · Horizon: 2025 review / 2026 outlook · Source: Rapid7 2026 Global Threat Landscape Report press releaseMedian time from vulnerability disclosure to listing in CISA's exploited catalogue fell from 8.5 to 5 days, compressing defenders' patch windows.
18 Mar 2026 · Horizon: 2026 · Source: Rapid7 2026 Global Threat Landscape Report press releaseValid accounts lacking strong multi-factor authentication were the leading way in, seen in about 44% of Rapid7 incident response cases.
18 Mar 2026 · Horizon: 2025 review · Source: Rapid7 2026 Global Threat Landscape Report press releaseRansomware featured in 42% of incident response cases, and leak-site posts rose by almost half to 8,835 in 2025.
18 Mar 2026 · Horizon: 2025 review · Source: Rapid7 2026 Global Threat Landscape Report press release
Questions about Rapid7 Labs
What is Rapid7 Labs?
The research team of security vendor Rapid7, publishing annual and quarterly threat landscape reports on vulnerability exploitation and attack trends for security teams.
How does Rapid7 Labs produce its intelligence?
Analysis of Rapid7 MDR and incident response cases, vulnerability and KEV data, and ransomware leak-site monitoring.
Where is Rapid7 Labs based?
Rapid7 Labs is based in Boston, United States.
What does Rapid7 Labs cover?
Its work covers cyber, terrorism & crime, technology & ai, with a focus on Global.
Profile compiled by the 311 Strategic Intelligence Unit from public sources. Last checked 21 Oct 2026. Listing is not a ranking or an endorsement. Evidence source. Is this your organisation? Request a correction.