Identify insecure TLS services with the enhanced runZero Certificate Inventory: www.runzero.com/blog/identif...

🎃 Happy Halloween! The end of #CybersecurityAwarenessMonth means it's time for our EoL-palooza grand finale! The scariest find? A surge of End-of-Life Proxmox systems... software zombies attackers feast on. 🧟‍♂️ @hdm.io has the guide to hunt them down: www.runzero.com/blog/managin...

Austin Hackers Anonymous (AHA) is TONIGHT (2025-10-30) takeonme.org - Have some zero-day to share? AHA is an official CNA and will issue CVEs for vulnerabilities disclosed at the meeting. I'm planning to demo more SSHamble.com findings along with BloodHound OpenGraph stuff. See yall soon!

So this story is super duper interesting for a whole ton of reasons, but one big one is its a very rare glimpse into the private valuation of high-end exploits held by major defense contractors bsky.app/profile/lega...

Just like chocolate and peanut butter, runZero and BloodHound are an amazing combination. Today we are introducing runZeroHound - an open source toolkit for bringing runZero Asset Inventory data into BloodHound attack graphs: www.runzero.com/blog/introdu...

It's the spooky season, so several of my ebooks are on sale. 💀🎃🪦 Aloha from Hell appears to be $2.99 everywhere, and The Secrets of Insects is $6.99. Dead Set and King Bullet are $1.99 each on Amazon. US only

SpecterOps released "DumpGuard" along with a detailed article on how they were able to bypass Windows Credential Guard in both privileged and unprivileged contexts. I learned a ton about Isolated LSA and friends: specterops.io/blog/2025/10...

Our new website has launched. We will continue to update the site with information as it becomes available. https://bsidespyongyang.com/

🎙️ Join @hdm.io, @todb.hugesuccess.org & @sawaba.bsky.social for a live SC Media webcast: “Fixing a Broken System: Why Legacy Vulnerability Management Tools Can’t Keep Up” Learn what’s next for exposure & attack surface management. 📅 Oct 29 ⏰ 2 PM ET 🔗 www.scworld.com/cybercast/fi...

I ♥️ encryption

Today's runZero Hour is up with Rob King, Tod Beardsley, and EOL expert and technology necromancer, captn3m0 (pronounced “nemo”). They will summon and explore runZero’s latest research paper, “Undead by design: Benchmarking end-of-life operating systems”: www.youtube.com/watch?v=BXBb...

JawnCon (jawncon.org) 0x02 just wrapped! I wish I could make it this year, but settled for catching the talks on the live stream: Main Stage Day 1: www.youtube.com/live/Cvf-mAd... Man Stage Day 2: www.youtube.com/watch?v=bcr6... Classroom Day 2: www.youtube.com/watch?v=1aML...

Hello Austin Gophers! Join us tonight, Wednesday, October 8th, 2025 for two hours of lightning talks and discussion at the ATX Go meetup. This is hosted by Capital Factory and runs from 6:30 PM to 8:30 PM central (with pizza and drinks!): www.meetup.com/atxgolang/ev...

🛡️ The attacker *will* get in. The real fight starts after the phish bites. Learn how to stop lateral movement, harden internal pathways, and make your network an attacker’s nightmare. 👉 Read: www.runzero.com/blog/how-to-...

New Mic-E-Mouse technique turns your optical mouse into a microphone that records conversations sites.google.com/view/mic-e-m...

🎙️ New Alice & Bob podcast by @BeyondTrust: runZero founder & CEO @hdm.io joins James Maude & @marcmaiffret.bsky.social to share how he went from dumpster-diving teen to cybersecurity pioneer 🎧 Listen: www.runzero.com/resources/al...

@SectorCa 2025 is fantastic! I last attended in 2008 and holy cow has it grown. Great to see Brian and Bruce still involved. Excellent talks, really sharp crowd, zero attitude, and everyone is incredibly friendly. You can find the slides from my morning keynote at hdm.io/decks/Sector...

✨ New report: Undead by design ✨ Zombie OSes aren’t just outdated, they’re risky. On Oct 14, Windows 10 goes EOL & 1/3 of Windows assets lose support. @todb.hugesuccess.org reveals how to protect your org: 👉 Read the (ungated!) report: www.runzero.com/resources/un...

🎙️ Risky Business Soap Box: @hdm.io chats with @patrick.risky.biz on why the old vuln mgmt playbook fails + what keeps defenders up at night: 🔍 Accurate vuln reads w/o spraying creds 🤝 Signals from EDR (not silos) ☁️ Cloud visibility where blind spots pile up 👉 www.runzero.com/resources/ri...

🍁 runZero is at SecTor! 🎤 Rob King — spotting counterfeit devices (Wed 4:15pm, Rm 716B) 🎤 @hdm.io — rules of cybersecurity (Thu 9am, Hall F) 🍻 HH w/@greynoise.io (Wed 6–8pm, The Pint) 👉RSVP: www.runzero.com/sector-happy... ✅ Register: sector.informafestivals.com/2025/

The CVE program nearly lost its funding. Cue the collective InfoSec panic. But only ~20% of incidents start with a CVE exploit. The rest? Misconfigs + bad segmentation exposures tools shrug at. @todb.hugesuccess.org explores what a post-CVE world might mean: www.runzero.com/blog/grappli...

📺 Join us today for the Security Week virtual Attack Surface Management Summit! Tune in for @hdm.io's keynote on "Rewriting the Rules of Exposure Management" to hear why traditional approaches keep failing and why we need a better way to manage vulns. asmsummit.securityweek.com/en/

In this new episode of Risky Business, Pat Gray and @hdm.io unpack the transformation of runZero into a full-blown vuln management platform. Tune in to get Pat's take on our unconventional approach to scanning -- without spraying credentials all over your network. www.runzero.com/resources/ri...

Hello Austin Gophers! Join us tonight, Wednesday, September 10th, 2025 for two hours of lightning talks and discussion at the ATX Go meetup. This meetup is hosted by Capital Factory and runs from 6:30 PM to 8:30 PM CDT (with pizza and drinks!): www.meetup.com/atxgolang/ev...

Looking forward to seeing all you hackers in meatspace! I'm bouncing between tracks and sharing slides (Unconference today + Track 2 tomorrow) on the Discord. If you're at @blueteamcon.com this weekend, please say hi, I look like this:

Hello Austin-area software engineers (or aspiring engineers)! Join us tonight, Wednesday, August 13, 2025 for two hours of lightning talks and discussion at the ATX Go meetup. This meetup is hosted by Capital Factory and runs from 6:30 PM to 8:30 PM CDT: www.meetup.com/atxgolang/ev...

If you missed this talk at BH/DC last week, it's worth a read: "From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion". Awesome work from Shu-Hao, Tung (123ojp) covering practical attacks on GRE and VxLAN tunnels: media.defcon.org/DEF%20CON%20...

Blue Team Con (@blueteamcon.com) is only three weeks away! I'm excited to share "The Death and Rebirth of Vulnerability Management", an analysis of coverage, tradeoffs, and efficacy across vulnerability scanners, endpoint agents, and open source security tools. blueteamcon.com/directory/th...

The legendary @hdm.io was @defcon.bsky.social this year (of course!) and revealed some critical challenges in widely used SSH protocol and provider recommendations on how to make it better. @networkworld.bsky.social www.networkworld.com/article/4038...

Blue Team Con is just three weeks away!

Great talk on community building by @hdm.io and @circuitswan.bsky.social at the @dianainitiative.bsky.social. Definitely one of those talks that I didn’t know I needed till I was there. #defcon33 #CommunityBuilding

Thank you to everyone who made it out for my DEF CON 33 presentation, "Shaking Out Shells With SSHamble", you can find the materials online at hdm.io/decks/MOORE%... This deck includes some lightly-censored zero-day (more decks @ hdm.io)

Are you an Austin-area software engineer who writes Go (or aspires to become one)? Join us Wednesday, August 13, 2025 for two hours of lightning talks and discussion. This meetup is hosted by Capital Factory and runs from 6:30 PM to 8:30 PM CDT: www.meetup.com/atxgolang/ev...

Hello DEF CON! Tomorrow (Saturday/August 9th) I'll be speaking with Nicole Schwartz on Forging Strong Cyber Communities in Uncertain Times at 1pm in W205 (TDI) and then shortly after on Shaking Out Shells with SSHamble at 3pm in Track 2 (LV1), with even more shells. Hope to see you there!

BSides Las Vegas 2025 is incredible. Amazing turn-out, fantastic staff, and the sheer variety of content, speakers, and activities sets the bar for what a hacker con should be. You can find the slides from my talk, "Turbo Tactical Exploitation: 22 Tips for Tricky Targets" at hdm.io/decks/BSides...

Kicking off Hacker Summer Camp with a 🔥 session at @bsideslv.org! @hdm.io takes the stage for a turbo-charged talk. Take a whirlwind tour through 22 practical exploitation tips faster than you can say SYN/ACK-ACK. 📍 The Tuscany, Ground Floor 🕚 11am 🔗 www.runzero.com/bsides-las-v...

🦄 Coming up at @dianainitiative.bsky.social: How do we build resilient, inclusive networks that last? Join @hdm.io & TDI board member @circuitswan.bsky.social at 3pm PDT for: 🎙️ Forging Strong Cyber Communities in Uncertain Times 📍 UNLV Student Union 🕒 3pm PDT 🔗 www.runzero.com/summer-camp-...

🎙️ Live at the top of the hour: open source + exposure management magic on today's runZero Hour. Project Discovery joins @todb.hugesuccess.org @hdm.io and Rob King to talk about how we're working together to build safer, smarter scanning. 📺 Stream it live: www.youtube.com/watch?v=kLyu...

runZero Hour #20 is LIVE NOW - This is an amazing episode that includes Rishi & Sandeep of projectdiscovery.io; here to give us the backstory on their company and the Nuclei open source vulnerability scanner (already bigger and more popular than Metasploit!). www.youtube.com/watch?v=kLyu...

Oh neato, a 13 year-old vuln in (checks notes) all US trains that allowed anyone to control the brakes? Cool cool cool.

Hello Austin Gophers! The July ATX Go Meetup is TONIGHT (July 9th). The meetup includes lightning talks, pizza, beverages, and general discussion. Have a neat idea? A quick talk related to Go? Something to show-and-tell? www.meetup.com/atxgolang/ev...

Call of Duty: PagerDuty Campaign Mode: Incident Commander Multiplayer Mode: Everyone’s On Call DLC: Zero-Day at Dawn

🎙️Just dropped! Our own @hdm.io joins @paulasadoorian.bsky.social + the rest of the crew on Paul's Security Weekly to discuss finding all the things and why vuln management is dead as we know it. 📺 Full episode: www.runzero.com/resources/is... More on default creds: www.runzero.com/blog/integra...

I'm excited to announce our "Out-of-Band" series; focused on the security risks of management devices like BMCs, serial servers, and KVMs. "Out-of-Band, Part 1: The new generation of IP KVMs and how to find them" is now live at: www.runzero.com/blog/oob-p1-...

Do you enjoy guzzling real-time TLS certificate allocations, but don't want to use a third-party service (crt.sh, CertStream, etc.)? Drink straight from the Certificate Transparency log firehose using ctail: $ go run github.com/hdm/ctail@latest -f -m '^autodiscover\.' github.com/hdm/ctail

Trying to imagine what the company security team's faces looked like when I asked what the policy is on using Meterpreter to launch a reverse RDP session from a network for which we lost all but EDR remote shell access when a stupid GUI is needed to turn stuff back on. 😈 h/t @hdm.io

🏆 Big news: runZero is a 2025 Rising in Cyber winner! It's an honor to be acknowledged by CISOs who are in the trenches every day and know that we are having a meaningful impact for defenders. Thank you Notable Capital and NYSE for this recognition! www.runzero.com/newsroom/ris...

implemented a script for #GlasgowInterfaceExplorer that lets you discover the connectivity of any IC with JTAG boundary scan, provided you can give the IC an arbitrary stimulus (here done by using a glasgow output connected to a needle point probe)

OOB BMCs (IPMI/iDRAC) are historically terrible at hosting providers: one customer can extract creds and route to the OOB network and use that to compromise other customers. The most trivial chain tends to be SMC servers using ipmitool > dump flash > extract pass > flash bd > pivot