runZero (Official Account)
banner
runzero.com
runZero (Official Account)
@runzero.com
runZero was founded by https://bsky.app/profile/hdm.io to help organizations see and secure their total attack surface — including risky unknowns and unmanageable devices. Discover a new approach to exposure management today: start a free trial!
📣 Two months post-Winpocalypse and…surprise! Windows 10 is still everywhere.

Not to brag but, we called it: end-of-life will not equate to end-of-use and the numbers don’t lie.

👉 Curious to learn more? Check out @todb.hugesuccess.org's blog from November: www.runzero.com/blog/winpoca...
December 12, 2025 at 2:32 PM
🔐 Zero Trust for OT just got real.

DoD released its first OT-focused guidance, defining Target vs. Advanced maturity and why IT models don’t translate.

If you secure OT, this matters.

👉 www.runzero.com/blog/dod-zer...
December 11, 2025 at 5:25 PM
#BlackHatEurope2025 we're back & better than ever!

Swing by booth #615 and try our immersive escape room — it’s your chance to flex those exposure management muscles!

Exclusive gear, great convos, and a few surprises await.

🔥 Bring your A-game!
December 11, 2025 at 1:02 PM
🎉 runZero is now officially a CVE Numbering Authority!

💪 Hear from @todb.hugesuccess.org on how we’re leveling up in the fight to keep networks safe.

Read the blog: www.runzero.com/blog/runzero...

Read the press release: www.runzero.com/newsroom/run...
December 10, 2025 at 2:09 PM
Exposure is everywhere now — cloud, SaaS, IoT, shadow IT, unmanaged vendors.

Replay the SC Media webcast with @sawaba.bsky.social, @hdm.io & @todb.hugesuccess.org to learn why continuous discovery matters & how attackers exploit what you can’t see.

👉 www.runzero.com/resources/as...
December 9, 2025 at 2:35 PM
SSH is still one of the strangest attack surfaces online.

Back at DEFCON, @hdm.io shared findings from internet-wide scans with SSHamble:

🔍 Where SSH is exposed
🐞 How quirks became auth bypass & RCE
🛠️ How SSHamble + Nuclei help defenders spot risk

🔗 www.runzero.com/resources/de...
December 8, 2025 at 3:14 PM
A full year of runZero Hour in the books!

Join us Dec 17 for the ❄️ Holiday Hackstravaganza ❄️ for your chance to win hacker toys for the holidays! We'll cover the best stories, strange vulns, predictions, trivia & more.

👉 www.runzero.com/research/run...
December 5, 2025 at 2:47 PM
Ready to level up your External Attack Surface Management game?

Don’t settle for “good enough.” Watch below for @todb.hugesuccess.org ’s top picks for what makes an EASM program truly great, and why these features matter more than ever.

👉 Get started here: www.runzero.com/platform/tot...
December 4, 2025 at 2:56 PM
#BlackHatEurope2025 is right around the corner!

Drop by runZero’s immersive escape room at Booth #615 to hunt for clues, crack the code and walk away with some serious SWAG (plus bragging rights).

👋 See you there: www.runzero.com/black-hat-eu...
December 3, 2025 at 2:24 PM
Curious how runZero data fits into BloodHound OpenGraph to generate visual attack paths?

@hdm.io breaks it down in this runZeroHound walkthrough...

➡️ www.runzero.com/blog/introdu...
December 2, 2025 at 3:12 PM
New on the blog: our favorite hacker gadgets of 2025 for exploring real-world systems.

We're gearing up for our Dec 17 “Holiday Hackstravaganza" where we'll offer three $200 Hak5 gift cards.

📟 See what we picked: www.runzero.com/blog/our-fav...
🎟️ RSVP: www.runzero.com/research/run...
December 1, 2025 at 3:09 PM
🎙️ The Hacker's Cache: Kyser Clark talks with Metasploit creator @hdm.io on why CVEs won’t save you in 2025.

They get into non-CVE vulns, hidden SSH risks, attacker innovation, AI’s impact, and why exposing version numbers can improve security.

👉 www.runzero.com/resources/wh...
November 28, 2025 at 2:20 PM
🦃 Happy Thanksgiving from all of us at runZero!

Wishing you good food, good company, and a quiet attack surface. 🩵
November 27, 2025 at 3:16 PM
On the latest Risky Biz, @patrick.risky.biz, and @hdm.io talk about visualizing the attack surface with runZeroHound, why you can't synthesize what runZero delivers, & how we are leveraging AI to help predict risks and scan smarter.

📺 Watch the full interview: www.runzero.com/resources/ri...
November 26, 2025 at 2:54 PM
🇦🇺 Australia’s Cyber Security Strategy is accelerating fast.

Ali Cheikh breaks down what Cyber Shield 2 demands and how runZero helps close the gaps.

👉 Read the post: www.runzero.com/blog/austral...
November 25, 2025 at 2:58 PM
📺 Live webcast Dec 3 with SC Media!

Your attack surface doesn’t end at the firewall.

Join @hdm.io, @todb.hugesuccess.org, and @sawaba.bsky.social to learn how continuous discovery + attack path mapping keeps you ahead.

👉 www.scworld.com/cybercast/at...
www.scworld.com
November 24, 2025 at 3:02 PM
🧭 Cybersecurity’s old rules are cracking.

In his SecTor keynote, @hdm.io breaks down the rules that shaped the 2000s: what survived, what failed us, and the new rules we’ll need next.

Missed it? 👀 Watch the keynote:
www.runzero.com/resources/on...
November 21, 2025 at 2:51 PM
runZero has always loved open source and our NetBox integration shows why.

Teams are enriching inventory, improving fingerprinting, and finding misconfigurations faster.

Learn more in @doug-markiewicz.bsky.social’s latest blog: www.runzero.com/blog/integra...
November 20, 2025 at 2:40 PM
runZero Hour is starting in one hour!

At 1PM ET / 10AM PT we'll dive into attack graphs with runZero + BloodHound.

@todb.hugesuccess.org, Rob King, @hdm.io, and SpecterOps CTO Jared Atkinson will break down hidden exposures + attack paths.

Join live: www.runzero.com/research/run...
November 19, 2025 at 5:02 PM
🧟 Winpocalypse update: a month after Windows 10’s EOL, the undead OS problem is spreading.

🐛 ESUs are buggy
📈 EOL rates tripled
🏥 Healthcare is ~40% EOL
🙈 Hope is not a strategy

@todb.hugesuccess.org breaks down what’s happening—and what comes next.

👉 www.runzero.com/blog/winpoca...
November 19, 2025 at 2:53 PM
The UK Cybersecurity & Resilience Bill is here and it’s the biggest shift since NIS 2018.

∘ Wider scope.
∘ 24/72-hr reporting.
∘ Mandatory supply chain controls.

One clear takeaway: you can’t comply with what you can’t see.

Get the full breakdown: www.runzero.com/blog/csrb-wh...
November 18, 2025 at 2:17 PM
AI-powered cybercrime? Please, go ahead! Yep, you read that right. @todb.hugesuccess.org argues that attackers leaning on AI might actually make life easier for defenders.

Watch the full ThreatCon1 podcast by @vulncheck.bsky.social for the full story: www.runzero.com/resources/cv...
November 17, 2025 at 2:47 PM
SDxCentral just covered @hdm.io's deep dive into the Proxmox EoL zombie problem.

If your asset inventory has Debian ghosts from 2023 (pre-v8), this one’s for you. 👇

HD’s post: www.runzero.com/blog/managin...
SDxCentral article: www.sdxcentral.com/news/open-so...
November 14, 2025 at 3:05 PM
Your attack surface is sprawling & full of blind spots.

🎥 On Dec 3 at 2 PM ET, SC Media brings together @hdm.io, @todb.hugesuccess.org, & @sawaba.bsky.social to reveal how to operationalize attack surface management without losing your mind.

👉 Register here: www.scworld.com/cybercast/at...
November 13, 2025 at 2:53 PM
runZero Hour is one week away!

Join us on Nov 19: @todb.hugesuccess.org, Rob King, @hdm.io, and Jared Atkinson ( CTO @specterops.io ) break down attacker movement, graph analysis, runZeroHound, and this month’s top vulnerabilities.

👉 Register here: www.runzero.com/research/run...
November 12, 2025 at 3:27 PM