Ever found a server sealed inside a wall? 🤔
On Risky Business, Tod Beardsley explains why #EOL OS and forgotten assets are more common than you think. Watch the clip below!
With runZero, see every asset, every attack path, and every exposure.
👉 Start a free trial today at: www.runzero.com/try/
On Risky Business, Tod Beardsley explains why #EOL OS and forgotten assets are more common than you think. Watch the clip below!
With runZero, see every asset, every attack path, and every exposure.
👉 Start a free trial today at: www.runzero.com/try/
November 13, 2026 at 4:33 PM
Ever found a server sealed inside a wall? 🤔
On Risky Business, Tod Beardsley explains why #EOL OS and forgotten assets are more common than you think. Watch the clip below!
With runZero, see every asset, every attack path, and every exposure.
👉 Start a free trial today at: www.runzero.com/try/
On Risky Business, Tod Beardsley explains why #EOL OS and forgotten assets are more common than you think. Watch the clip below!
With runZero, see every asset, every attack path, and every exposure.
👉 Start a free trial today at: www.runzero.com/try/
Did you miss runZero’s expertise featured in Data Breach Today’s coverage of last month’s critical PHP2SHELL bugs?
👀 Article: www.databreachtoday.com/attackers-ex...
👉 Learn how runZero can help defenders quickly identify potentially vulnerable #PHP instances at: www.runzero.com/blog/php/
👀 Article: www.databreachtoday.com/attackers-ex...
👉 Learn how runZero can help defenders quickly identify potentially vulnerable #PHP instances at: www.runzero.com/blog/php/
November 9, 2026 at 3:03 PM
Did you miss runZero’s expertise featured in Data Breach Today’s coverage of last month’s critical PHP2SHELL bugs?
👀 Article: www.databreachtoday.com/attackers-ex...
👉 Learn how runZero can help defenders quickly identify potentially vulnerable #PHP instances at: www.runzero.com/blog/php/
👀 Article: www.databreachtoday.com/attackers-ex...
👉 Learn how runZero can help defenders quickly identify potentially vulnerable #PHP instances at: www.runzero.com/blog/php/
Agentic AI: Because finding bugs manually is so 2025. 🤖
Next week, tune into the runZero Hour with Tod Beardsley, Bri Cluck, HD Moore and Thai Duong to discuss AI bug hunting, PHP2Shell and the #PHP Oct 2026 release.
🗓️ Wed, 11/18 | 1PM ET/10AM PT
Register at: 👉 www.runzero.com/research/run...
Next week, tune into the runZero Hour with Tod Beardsley, Bri Cluck, HD Moore and Thai Duong to discuss AI bug hunting, PHP2Shell and the #PHP Oct 2026 release.
🗓️ Wed, 11/18 | 1PM ET/10AM PT
Register at: 👉 www.runzero.com/research/run...
November 10, 2026 at 3:03 PM
Agentic AI: Because finding bugs manually is so 2025. 🤖
Next week, tune into the runZero Hour with Tod Beardsley, Bri Cluck, HD Moore and Thai Duong to discuss AI bug hunting, PHP2Shell and the #PHP Oct 2026 release.
🗓️ Wed, 11/18 | 1PM ET/10AM PT
Register at: 👉 www.runzero.com/research/run...
Next week, tune into the runZero Hour with Tod Beardsley, Bri Cluck, HD Moore and Thai Duong to discuss AI bug hunting, PHP2Shell and the #PHP Oct 2026 release.
🗓️ Wed, 11/18 | 1PM ET/10AM PT
Register at: 👉 www.runzero.com/research/run...
SANS Stormcast Thursday, November 5th, 2026: Email Test Scripts; runZero oobscan BMC/IPMI; apt Signature Bypass (CVE-2026-109518); SonicWall GMS EOL Unpatched Flaws
https://isc.sans.edu/podcastdetail/10166
https://isc.sans.edu/podcastdetail/10166
November 5, 2026 at 11:25 AM
SANS Stormcast Thursday, November 5th, 2026: Email Test Scripts; runZero oobscan BMC/IPMI; apt Signature Bypass (CVE-2026-109518); SonicWall GMS EOL Unpatched Flaws
https://isc.sans.edu/podcastdetail/10166
https://isc.sans.edu/podcastdetail/10166
"In my day, you had a firewall and it did one thing: it firewalled."
Now every edge device is an "everything box" packed with a decade of feature creep. If everything is sitting on the edge, do you really even have a DMZ anymore?
Check out the latest runZero Hour: www.runzero.com/resources/ru...
Now every edge device is an "everything box" packed with a decade of feature creep. If everything is sitting on the edge, do you really even have a DMZ anymore?
Check out the latest runZero Hour: www.runzero.com/resources/ru...
November 6, 2026 at 3:06 PM
"In my day, you had a firewall and it did one thing: it firewalled."
Now every edge device is an "everything box" packed with a decade of feature creep. If everything is sitting on the edge, do you really even have a DMZ anymore?
Check out the latest runZero Hour: www.runzero.com/resources/ru...
Now every edge device is an "everything box" packed with a decade of feature creep. If everything is sitting on the edge, do you really even have a DMZ anymore?
Check out the latest runZero Hour: www.runzero.com/resources/ru...
At DISC 2026? events.dragos.com/disc2026 - Reach out if you'd like to chat about Dragos research and runZero product things! Great talks and an amazing community of defenders. I'd post photos/highlights, except its not that kind of conference, and you (literally) have to be here to see them.
DISC 2026
DISC 2026 takes place from November 4, 2026 to November 6, 2026 at Live! Casino & Hotel Maryland, Hanover, MD. Organized by Dragos.
events.dragos.com
November 5, 2026 at 8:16 PM
At DISC 2026? events.dragos.com/disc2026 - Reach out if you'd like to chat about Dragos research and runZero product things! Great talks and an amazing community of defenders. I'd post photos/highlights, except its not that kind of conference, and you (literally) have to be here to see them.
At DISC 2026? https://events.dragos.com/disc2026 - Reach out if you'd like to chat about Dragos research and runZero product things! Great talks and an amazing community of defenders. I'd post photos/highlights, except its not that kind of conference, and you (literally) have to be here to see them.
November 5, 2026 at 8:16 PM
At DISC 2026? https://events.dragos.com/disc2026 - Reach out if you'd like to chat about Dragos research and runZero product things! Great talks and an amazing community of defenders. I'd post photos/highlights, except its not that kind of conference, and you (literally) have to be here to see them.
🚨 EUVD-2026-115874
📊 6.5/10
🏢 runZero
📝 A specially crafted malformed search query could return results from outside a user's organization. Log analysis of runZero's hosted environment found o...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115874
#cybersecurity #infosec #cve #euvd
📊 6.5/10
🏢 runZero
📝 A specially crafted malformed search query could return results from outside a user's organization. Log analysis of runZero's hosted environment found o...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115874
#cybersecurity #infosec #cve #euvd
November 3, 2026 at 4:04 PM
🚨 EUVD-2026-115874
📊 6.5/10
🏢 runZero
📝 A specially crafted malformed search query could return results from outside a user's organization. Log analysis of runZero's hosted environment found o...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115874
#cybersecurity #infosec #cve #euvd
📊 6.5/10
🏢 runZero
📝 A specially crafted malformed search query could return results from outside a user's organization. Log analysis of runZero's hosted environment found o...
🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115874
#cybersecurity #infosec #cve #euvd
🚀 New Remote Job Alert!
💼 Position: CAASM Cyber Security Technical Specialist
🏢 Company: Hays
🌍 Location: Canberra
📁 Category: Operations
🛠️ Skills: RUNZERO, CAASM, CYBER ASSET ATTACK SURFACE MANAGEMENT, ASSET DISCOVERY, ASSET VISIBILITY...
#RemoteJobs #RemoteWork #WorkFromHome #Hiring #JobOpp
💼 Position: CAASM Cyber Security Technical Specialist
🏢 Company: Hays
🌍 Location: Canberra
📁 Category: Operations
🛠️ Skills: RUNZERO, CAASM, CYBER ASSET ATTACK SURFACE MANAGEMENT, ASSET DISCOVERY, ASSET VISIBILITY...
#RemoteJobs #RemoteWork #WorkFromHome #Hiring #JobOpp
November 2, 2026 at 2:45 PM
🚀 New Remote Job Alert!
💼 Position: CAASM Cyber Security Technical Specialist
🏢 Company: Hays
🌍 Location: Canberra
📁 Category: Operations
🛠️ Skills: RUNZERO, CAASM, CYBER ASSET ATTACK SURFACE MANAGEMENT, ASSET DISCOVERY, ASSET VISIBILITY...
#RemoteJobs #RemoteWork #WorkFromHome #Hiring #JobOpp
💼 Position: CAASM Cyber Security Technical Specialist
🏢 Company: Hays
🌍 Location: Canberra
📁 Category: Operations
🛠️ Skills: RUNZERO, CAASM, CYBER ASSET ATTACK SURFACE MANAGEMENT, ASSET DISCOVERY, ASSET VISIBILITY...
#RemoteJobs #RemoteWork #WorkFromHome #Hiring #JobOpp
Heading to the IANS Boston Forum today? So is the runZero team!
We’re proud to sponsor this year’s forum. If you’re on-site, track us down — we're ready to talk complete asset discovery, tackling blind spots across OT and cloud environments, and exposure management.
Let us know if you're around! 👋
We’re proud to sponsor this year’s forum. If you’re on-site, track us down — we're ready to talk complete asset discovery, tackling blind spots across OT and cloud environments, and exposure management.
Let us know if you're around! 👋
October 29, 2026 at 1:03 PM
Heading to the IANS Boston Forum today? So is the runZero team!
We’re proud to sponsor this year’s forum. If you’re on-site, track us down — we're ready to talk complete asset discovery, tackling blind spots across OT and cloud environments, and exposure management.
Let us know if you're around! 👋
We’re proud to sponsor this year’s forum. If you’re on-site, track us down — we're ready to talk complete asset discovery, tackling blind spots across OT and cloud environments, and exposure management.
Let us know if you're around! 👋
The chaos following major zero-days like the recent PHP vulnerabilities proved one thing: bad information is worse than silence.
In this clip, Cale Black calls for an industry reckoning on early detection noise.
Catch the latest episode of runZero Hour here: www.runzero.com/resources/ru...
In this clip, Cale Black calls for an industry reckoning on early detection noise.
Catch the latest episode of runZero Hour here: www.runzero.com/resources/ru...
October 28, 2026 at 2:05 PM
The chaos following major zero-days like the recent PHP vulnerabilities proved one thing: bad information is worse than silence.
In this clip, Cale Black calls for an industry reckoning on early detection noise.
Catch the latest episode of runZero Hour here: www.runzero.com/resources/ru...
In this clip, Cale Black calls for an industry reckoning on early detection noise.
Catch the latest episode of runZero Hour here: www.runzero.com/resources/ru...
Register for the next episode on November 18: www.runzero.com/research/run...
runZero Hour – Subscribe to the series
Deep dive web series into all things exposure, from new threats and risky devices to vulnerabilities hiding in IT, OT, IoT, remote, cloud, and mobile…
www.runzero.com
October 28, 2026 at 3:42 PM
Register for the next episode on November 18: www.runzero.com/research/run...
Attending it-sa Expo & Congress in Nuremberg? Stop by our kiosk at the Aqaio stand to meet the runZero team!
See a live demo & learn why runZero is exposure management built for the AI-attack era! 🚀
👉 www.itsa365.de/en/it-sa-exp...
#itsa26 #ExposureManagement #itsaexpo
See a live demo & learn why runZero is exposure management built for the AI-attack era! 🚀
👉 www.itsa365.de/en/it-sa-exp...
#itsa26 #ExposureManagement #itsaexpo
October 27, 2026 at 6:00 AM
Attending it-sa Expo & Congress in Nuremberg? Stop by our kiosk at the Aqaio stand to meet the runZero team!
See a live demo & learn why runZero is exposure management built for the AI-attack era! 🚀
👉 www.itsa365.de/en/it-sa-exp...
#itsa26 #ExposureManagement #itsaexpo
See a live demo & learn why runZero is exposure management built for the AI-attack era! 🚀
👉 www.itsa365.de/en/it-sa-exp...
#itsa26 #ExposureManagement #itsaexpo
Supermicro BMC vulnerabilities hit 392 boards. Critical IPMI flaw CVE-2026-18450 (CVSS 9.8) lets attackers run commands. Update BMC firmware now.
#Supermicro #BMC #IPMI #CVE202618450 #FirmwareSecurity #runZero #Vulnerability
#Supermicro #BMC #IPMI #CVE202618450 #FirmwareSecurity #runZero #Vulnerability
Supermicro BMC Vulnerabilities Hit 392 Boards, One Rated CVSS 9.8
TL;DR Supermicro has disclosed eight Supermicro BMC vulnerabilities that affect 392 motherboard and module SKUs. The worst IPMI flaw, CVE-2026-18450, carries a critical CVSS score of 9.8. It lets an unauthenticated attacker run IPMI commands on an active session. Researchers at runZero found and reported all eight bugs. Eight flaws hit the IPMI and KVM features of Supermicro BMC firmware. Three of them need no login, and one is rated critical.
securityonline.info
October 28, 2026 at 1:35 AM
Supermicro BMC vulnerabilities hit 392 boards. Critical IPMI flaw CVE-2026-18450 (CVSS 9.8) lets attackers run commands. Update BMC firmware now.
#Supermicro #BMC #IPMI #CVE202618450 #FirmwareSecurity #runZero #Vulnerability
#Supermicro #BMC #IPMI #CVE202618450 #FirmwareSecurity #runZero #Vulnerability
🤝 Three forces, one unified mission.🛡️
By bringing together runZero, NetRise, and Dragos, we are uniting different areas of cybersecurity research to solve complex problems as one team.
@todb.hugesuccess.org breaks down what this merger means for the future.
📖 Blog: www.runzero.com/blog/powers-...
By bringing together runZero, NetRise, and Dragos, we are uniting different areas of cybersecurity research to solve complex problems as one team.
@todb.hugesuccess.org breaks down what this merger means for the future.
📖 Blog: www.runzero.com/blog/powers-...
October 23, 2026 at 2:02 PM
🤝 Three forces, one unified mission.🛡️
By bringing together runZero, NetRise, and Dragos, we are uniting different areas of cybersecurity research to solve complex problems as one team.
@todb.hugesuccess.org breaks down what this merger means for the future.
📖 Blog: www.runzero.com/blog/powers-...
By bringing together runZero, NetRise, and Dragos, we are uniting different areas of cybersecurity research to solve complex problems as one team.
@todb.hugesuccess.org breaks down what this merger means for the future.
📖 Blog: www.runzero.com/blog/powers-...
Some lady from the internet keeps trying to buy runZero from me (the company), and I keep saying yes, sure. And she keeps asking, like every couple weeks, if I'm interested in selling it. This has been going on for a couple months now, since the Dragos announcement.
I've offered my Venmo. I'm […]
I've offered my Venmo. I'm […]
Original post on infosec.exchange
infosec.exchange
October 23, 2026 at 8:44 PM
Some lady from the internet keeps trying to buy runZero from me (the company), and I keep saying yes, sure. And she keeps asking, like every couple weeks, if I'm interested in selling it. This has been going on for a couple months now, since the Dragos announcement.
I've offered my Venmo. I'm […]
I've offered my Venmo. I'm […]
Missing the one integration you need? 🛠️
On RiskyBusiness, HD Moore shares how runZero solved this with an AI integration generator into the product! Just drop in an API doc URL or endpoint, & get a live integration on the spot.
Watch 👇
www.runzero.com/resources/ri...
On RiskyBusiness, HD Moore shares how runZero solved this with an AI integration generator into the product! Just drop in an API doc URL or endpoint, & get a live integration on the spot.
Watch 👇
www.runzero.com/resources/ri...
October 22, 2026 at 2:04 PM
Missing the one integration you need? 🛠️
On RiskyBusiness, HD Moore shares how runZero solved this with an AI integration generator into the product! Just drop in an API doc URL or endpoint, & get a live integration on the spot.
Watch 👇
www.runzero.com/resources/ri...
On RiskyBusiness, HD Moore shares how runZero solved this with an AI integration generator into the product! Just drop in an API doc URL or endpoint, & get a live integration on the spot.
Watch 👇
www.runzero.com/resources/ri...
Tune in via YouTube here: www.youtube.com/watch?v=XhFz...
runZero Hour: Dragos and the Research Cinematic Universe
This episode kicks off one of the most epic cross-over events in security research history! Join us on this month’s runZero Hour for the first post-acquisition runZero Hour episode! Tod and Bri will…
www.youtube.com
October 21, 2026 at 4:06 PM
Tune in via YouTube here: www.youtube.com/watch?v=XhFz...
The PHP foundation announced a security release tomorrow (Oct 21) addressing 2 critical PHP vulns that could lead to RCE.
Find your PHP instances using runZero: www.runzero.com/blog/php/
For latest developments, tune into runZero Hour with our research team tomorrow at 1pm ET (🔗 in 🧵)
Find your PHP instances using runZero: www.runzero.com/blog/php/
For latest developments, tune into runZero Hour with our research team tomorrow at 1pm ET (🔗 in 🧵)
Critical RCE vulnerability in PHP: Find impacted assets
PHP has announced a security release scheduled for October 21, 2026 that addresses two critical vulnerabilities, both rated CVSS v4.0 9.2.
www.runzero.com
October 20, 2026 at 11:22 PM
The PHP foundation announced a security release tomorrow (Oct 21) addressing 2 critical PHP vulns that could lead to RCE.
Find your PHP instances using runZero: www.runzero.com/blog/php/
For latest developments, tune into runZero Hour with our research team tomorrow at 1pm ET (🔗 in 🧵)
Find your PHP instances using runZero: www.runzero.com/blog/php/
For latest developments, tune into runZero Hour with our research team tomorrow at 1pm ET (🔗 in 🧵)
Register for runZero Hour here: www.runzero.com/research/run...
runZero Hour – Subscribe to the series
Deep dive web series into all things exposure, from new threats and risky devices to vulnerabilities hiding in IT, OT, IoT, remote, cloud, and mobile…
www.runzero.com
October 20, 2026 at 11:22 PM
Register for runZero Hour here: www.runzero.com/research/run...
⚡ Live in 1 hour, watch runZero Hour! PHP vulns are on the minds of all security peeps today. Our research team will unpack the vulns and share what they've learned in the last 18 hours, and more!
Register for the Zoom chat at 1PM ET / 10AM PT: www.runzero.com/research/run...
Register for the Zoom chat at 1PM ET / 10AM PT: www.runzero.com/research/run...
October 21, 2026 at 4:06 PM
⚡ Live in 1 hour, watch runZero Hour! PHP vulns are on the minds of all security peeps today. Our research team will unpack the vulns and share what they've learned in the last 18 hours, and more!
Register for the Zoom chat at 1PM ET / 10AM PT: www.runzero.com/research/run...
Register for the Zoom chat at 1PM ET / 10AM PT: www.runzero.com/research/run...
⏰ Tomorrow: The Research Cinematic Universe crossover!
Join runZero Hour with Tod Beardsley, Bri Cluck, Reid Wightman, Peter Eacmen & Cale Black.
✔️ OT, IT & firmware security
✔️ Top vulns & Lights Out update
👉 Register ASAP: www.runzero.com/research/run...
Join runZero Hour with Tod Beardsley, Bri Cluck, Reid Wightman, Peter Eacmen & Cale Black.
✔️ OT, IT & firmware security
✔️ Top vulns & Lights Out update
👉 Register ASAP: www.runzero.com/research/run...
October 20, 2026 at 2:03 PM
⏰ Tomorrow: The Research Cinematic Universe crossover!
Join runZero Hour with Tod Beardsley, Bri Cluck, Reid Wightman, Peter Eacmen & Cale Black.
✔️ OT, IT & firmware security
✔️ Top vulns & Lights Out update
👉 Register ASAP: www.runzero.com/research/run...
Join runZero Hour with Tod Beardsley, Bri Cluck, Reid Wightman, Peter Eacmen & Cale Black.
✔️ OT, IT & firmware security
✔️ Top vulns & Lights Out update
👉 Register ASAP: www.runzero.com/research/run...
1. The cyber deals (Dragos, runZero, NetRise) add ~$208M in recurring revenue, under 1% of the total. Costs could limit the profit benefit.
2. A $38B backlog gives it a cushion, with ~$13.3B due as revenue in fiscal 2027.
3. AI cuts both ways: new demand, but pricing pressure.
2. A $38B backlog gives it a cushion, with ~$13.3B due as revenue in fiscal 2027.
3. AI cuts both ways: new demand, but pricing pressure.
October 15, 2026 at 9:46 AM
1. The cyber deals (Dragos, runZero, NetRise) add ~$208M in recurring revenue, under 1% of the total. Costs could limit the profit benefit.
2. A $38B backlog gives it a cushion, with ~$13.3B due as revenue in fiscal 2027.
3. AI cuts both ways: new demand, but pricing pressure.
2. A $38B backlog gives it a cushion, with ~$13.3B due as revenue in fiscal 2027.
3. AI cuts both ways: new demand, but pricing pressure.
⏰ 1 week away: The Research Cinematic Universe Crossover!
Watch runZero Hour with Tod Beardsley, Bri Cluck, Reid Wightman, Peter Eacmen & Cale Black.
Expect:
✔️ OT, IT & firmware security
✔️ Top vulns this month & Lights Out update
✔️ Lots of laughs
👉 Register: www.runzero.com/research/run...
Watch runZero Hour with Tod Beardsley, Bri Cluck, Reid Wightman, Peter Eacmen & Cale Black.
Expect:
✔️ OT, IT & firmware security
✔️ Top vulns this month & Lights Out update
✔️ Lots of laughs
👉 Register: www.runzero.com/research/run...
October 14, 2026 at 2:02 PM
⏰ 1 week away: The Research Cinematic Universe Crossover!
Watch runZero Hour with Tod Beardsley, Bri Cluck, Reid Wightman, Peter Eacmen & Cale Black.
Expect:
✔️ OT, IT & firmware security
✔️ Top vulns this month & Lights Out update
✔️ Lots of laughs
👉 Register: www.runzero.com/research/run...
Watch runZero Hour with Tod Beardsley, Bri Cluck, Reid Wightman, Peter Eacmen & Cale Black.
Expect:
✔️ OT, IT & firmware security
✔️ Top vulns this month & Lights Out update
✔️ Lots of laughs
👉 Register: www.runzero.com/research/run...
def start with runZero tho. It's the most innovative one out there and finds all the nooks and crannies on your network nothing else does. I also may know like 1/2 the folks that work there (well, they're now part of Dragos, so likely a smaller percentage, but still…all good ppl).
October 12, 2026 at 9:57 PM
def start with runZero tho. It's the most innovative one out there and finds all the nooks and crannies on your network nothing else does. I also may know like 1/2 the folks that work there (well, they're now part of Dragos, so likely a smaller percentage, but still…all good ppl).