runZero, Inc

runZero, a Dragos company, delivers total attack surface & exposure management. See & secure every asset on your network. Try it free today!

Website: https://www.runzero.com
Github: https://github.com/runZeroInc
X: https://x.com/runZeroInc

Last Notes

2026-07-28 14:30:24 GMT

🚨Webinar alert - Tomorrow - Mind the Gaps: Securing the modern IT/OT attack surface
Register now to join GigaOm Field CTO Chris Ray and runZero CEO HD Moore tomorrow for a live webinar as they explore new methods for hardening OT defenses and discuss insights from the recent GigaOm Radar for OT Security.
🗓️ Tomorrow, July 29 at 1pm ET / 10am PT
👉 Register today and read the report at: https://www.runzero.com/gigaom-radar-ot-security/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/998/079/967/327/998/original/83693be24784b232.webp

2026-04-30 13:33:01 GMT

🚨 New runZero 4.9: Shatter the segmentation illusion and reveal hidden attack paths across IT and #OT environments!
Experience the power of our latest release:
📈 Interactive attack path mapping
👁️ Multi-homed & bridge detection
🗺️ 2D/3D searchable topology
🧠 Deep OT intelligence, including field-level discovery
🔥 Real-world risk prioritization
✅ Identify protocol exposures
💻 UI/UX enhancements
👉 Learn more at: https://www.runzero.com/blog/runzero-4-9
#OTsecurity
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/493/908/707/708/552/original/bf111516e60d6e3b.mp4

2025-12-09 14:35:10 GMT

🔎 Your attack surface isn’t where you think it is.
Cloud, SaaS, IoT, shadow IT, vendors — exposure now lives everywhere, and traditional scanning can’t keep up.
On Dec. 3, SC Media hosted a webcast with @npub19vv…d56q, @npub18pc…787r, and @npub1qzu…rvyk on:
✔️ Continuous discovery
✔️ Overlooked external pathways
✔️ Why periodic inventories fail
✔️ How to operationalize ASM
👉 Watch the replay and learn how to see what others miss: https://www.runzero.com/resources/asm-continuous-discovery/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/690/104/921/878/674/original/8ca3f7ec7247028a.mp4

2025-12-08 14:59:29 GMT

SSH remains one of the weirdest and widest attack surfaces online.
At DEF CON, @npub18pc…787r shared findings from internet-wide scans with SHamble, showing where SSH is exposed, how tiny quirks became auth bypass & blind RCE, and how new SHamble + Nuclei features help defenders spot risky keys and configs.
🔗 Watch: https://www.runzero.com/resources/def-con-33-shaking-out-shells/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/684/538/339/460/886/original/ae6b205060f8525c.mp4

2024-12-04 17:49:26 GMT

‼️ New vulnerabilities have been disclosed in the Veeam Service Provider Console.
CVE-2024-42448 is critical, potentially allowing remote code execution. CVE-2024-42449 is rated high, potentially leaking the NTLM hash of a service account & allowing file deletion.
Learn more and see how to find potentially impacted systems:
https://www.runzero.com/blog/veeam-instances/

2024-10-23 19:06:07 GMT

❗ Fortinet has issued an advisory for FortiManager confirming CVE-2024-47575 is being actively exploited in the wild. This extremely critical vulnerability has a CVSS score of 9.8.
⚠️ This vulnerability can enable RCE upon connecting to a FortiManager instance with a valid Fortinet device certificate and could lead to total compromise of the vulnerable system.
⏱️ Shoutout to @npub1mzg…l2g4 for the quick work on this Rapid Response!
👉 Launch runZero now to pinpoint assets that could be affected -- no rescanning or credentials required:
https://www.runzero.com/blog/how-to-find-fortimanager-instances-on-your-network/