Rapid7, Inc. (NASDAQ: RPD) will participate in three upcoming investor conferences in September 2026. The cybersecurity company scheduled presentations at the Citi Global TMT Conference and the Piper Sandler Growth Frontiers Conference, alongside one-on-one meetings at the Wolfe Research TMT Conference.

Conference Schedule

The company outlined its engagement timeline across New York, San Francisco, and Nashville. All presentations will be webcast live, with replays available for a limited time on the company’s investor relations website.

About Rapid7

Rapid7 describes itself as a global leader in AI-powered managed cybersecurity operations. The Rapid7 Command Platform integrates security data with AI and threat intelligence to serve more than 11,500 customers worldwide. The company focuses on preemptive managed detection and response (MDR) to advance cyber resilience.

Rapid7 Inc (NASDAQ: RPD) released its Quarterly Threat Landscape Report on August 18, 2026, revealing that 62% of newly exploited vulnerabilities in the second quarter were "holy grail" flaws that could be exploited over a network without authentication or user interaction. The findings highlight a shift toward automated attack chains, where the window between vulnerability disclosure and active exploitation has collapsed.

High and critical vulnerability disclosures doubled year-over-year to 8,539, while newly exploited vulnerabilities jumped by up to 40%. This surge in exposure is compounded by an increase in publicly available proof-of-concept (PoC) code, which rose 12% quarter-over-quarter and 76% year-over-year, expanding the pool of tools attackers can quickly turn into real-world attacks.

What the Numbers Show

The data reveals a divergence between disclosure volume and exploitability. While high and critical disclosures doubled year-over-year, the proportion of these flaws that are zero-click (62%) suggests that traditional patching models based on static severity scores are increasingly ineffective. The simultaneous 247% year-over-year increase in disclosures involving missing authentication (from 45 to 156) indicates that attackers are prioritizing low-effort entry points over complex exploits.

Christiaan Beek, Vice President at Rapid7 Labs, stated that security teams relying on periodic patch cycles are "subsidizing the attackers' R&D." He emphasized moving beyond static CVSS scores to focus on reachable and exploitable exposures.

Ransomware and Geopolitical Threats

Ransomware activity remained concentrated but expanded geographically. The United States accounted for 881 listed ransomware victims, approximately nine times the 99 recorded in Germany. India and Thailand entered the top 10 countries for victims, indicating that ransomware affiliate programs are extending beyond historically prominent U.S. and European targets.

State-aligned campaigns from Iran, North Korea, and Russia targeted critical infrastructure and enterprise sectors. Key tactics included exploiting SOHO edge routers for DNS hijacking and actively targeting operational technology and industrial control systems.