De-censoring a video's never been easier. Check out how quickly people were able to undo the pixelization in one of my YouTube videos: youtube.com/watch?v=acKYYw…

🛡️ Yesterday brought a funding scare that nearly disrupted the #CVE program as we know it, but support has now been continued by CISA. In our latest blog post, Tod Beardsley is @[email protected], a member of the CVE Board, shares the latest developments on this unfolding story. 👉 runzero.com/blog/cve-march…

‼️A new critical Erlang/OTP SSH vulnerability has been disclosed. Successful exploitation allows an attacker to execute arbitrary code without authentication. See how to quickly find potentially impacted instances: runzero.com/blog/erlang-ot…

Ready to ditch your vulnerability scanner? Our latest post shows how combining your existing endpoint agents for CVE detection with runZero’s unmatched visibility for everything else delivers better exposure management — without the flood of alerts. runzero.com/blog/ditch-vul…

Hello from BSides San Francisco! I'm excited to speak at 1:30pm in the AMC IMAX today. If you'd like to catch up afterwards, I'll be at the runZero booth first and at the City View lounge later. If you couldn't make the trip, the streaming links are live youtube.com/@BSidesSF/stre…

I'm making an effort to migrate to Blue Sky: bsky.app/profile/pedram… If you follow me here, please follow me there so I can find you. I tried the following tool, but it covered less than 3% of my circle: sky-follower-bridge.dev Alternatively, I also post a weekly news recap

⚡ New Report⚡ Divining risk isn’t just for mystics. Defenders do it every day — reading signals, spotting patterns, & deciding what really matters. Tod Beardsley is @[email protected] analyzed the scoring systems at the core of modern triage: CVSS, EPSS, & SSVC. See what he found: runzero.com/resources/deci…

I was very impressed with the runZero, Inc. report comparing vulnerability severity frameworks CVSS, EPSS and SSVC for two reasons: 1 - Lots of great analysis of how these vulnerability severity prioritization frameworks have biases, strengths and weaknesses. 2 - As a cyber

What do ghosts, squids, and scoring systems have in common? Find out at 9:15 ET! Join us live at NorthSec or tune in virtually on YouTube for HD Moore's keynote: A Pirate’s Guide to Snake Oil and Security. youtube.com/watch?v=J4rGZB…

A PSA for why you should probably not use Postman (it can leak secrets to them): anonymousdata.medium.com/postman-is-log…

☕ See your attack surface before your coffee gets cold. runZero will be at #InfoSecEurope next week with free espresso, live demos, & full-spectrum exposure management — IT, OT, IoT, mobile & cloud. No agents. No authentication. Just total visibility. 👋 Say hi at Stand D108

🏆 Big news: runZero is a 2025 Rising in Cyber winner! It's an honor to be acknowledged by CISOs who are in the trenches every day and know that we are having a meaningful impact for defenders. Thank you Notable Capital and NYSE 🏛 for this recognition! runzero.com/newsroom/risin…

🎙️ New podcast: From Vulnerability to Visibility CVEs don’t show what attackers see. That’s why runZero starts from the outside in —mapping IT, OT & IoT like an adversary. Tod Beardsley is @[email protected] breaks it down live from #Infosec2025 . 👇 🎧 Listen: runzero.com/resources/from… #ExposureManagement

We're back to 2000's era karma / karmetasploit reflection exploits! I wonder what else this SRV name format is useful for...

PHRACK is coming to DEF CON! We're printing ~10,000 zines and giving an hour-long talk you won't want to miss! Stay tuned. 🔥 #40yrsOfPhrack #phrack72

I'm excited to announce our "Out-of-Band" series; focused on the security risks of management devices like BMCs, serial servers, and KVMs. "Out-of-Band, Part 1: The new generation of IP KVMs and how to find them" is now live at: runzero.com/blog/oob-p1-ip…

🎙️ Just dropped! Our own HD Moore joins the talented crew on Paul's Security Weekly to discuss finding all the things and why vulnerability management is dead as we know it. Thanks Paul Asadoorian @[email protected] for having us! 📺 Full episode here: runzero.com/resources/is-v…

Hello Austin Gophers! The July ATX Go Meetup is TONIGHT (July 9th). The meetup includes lightning talks, pizza, beverages, and general discussion. Have a neat idea? A quick talk related to Go? Something to show-and-tell? meetup.com/atxgolang/even…