"The @phrack CFP with demoscene cracktro is live. Turn up the volume and enjoy the awesome stylings of @PiotrBania with some hopefully inspiring text from phrack staff :)" phrack.org (via @richinseattle)

The Phrack Staff is on the latest episode of the DarknetDiaries episode! darknetdiaries.com/episode/170/

Huh -- this week, the FBI uploaded 35 pages on Phrack to its FOIA Library vault.fbi.gov/phrack/phrac...

I spy a Phrack gnome in the latest FIRE #ansi pack! Thanks @nail7.bsky.social, it's so cool!

New AirSnitch attack breaks Wi-Fi encryption in homes, offices, and enterprises: arstechnica.com/security/202... AirSnitch resets WiFi security back to the bad-old-days of ARP spoofing and trivial MITM.

Hello Austin Go hackers! Tonight (2026-02-11) is our next ATX Golang meetup, located in Station Austin (aka Capital Factory ). We will have pizza, drinks, and various short talks and discussions related to the Go ecosystem: www.meetup.com/atxgolang/ev...

runZero users get a new feature today (including Community Edition) - recurring internet speed tests for all deployed Explorers! This (very optional) capability lets you identify backhaul/connectivity issues for sites that you can't physically get to: www.runzero.com/blog/interne...

It's time for our first ATX Gopher meetup of the year! If you are in Austin and write Go code (or would like to start), please join us at 6:30pm at Station Austin (co-located with Capital Factory). Charles and I will be providing pizza and drinks as usual: www.meetup.com/atxgolang/ev...

🎧 We collected some of our favorite podcasts of 2025 featuring @hdm.io for you to enjoy. 📺 So go ahead and get yourself some coffee (or hot cocoa!) & watch here: www.runzero.com/blog/fun-pod...

Exposure is everywhere now — cloud, SaaS, IoT, shadow IT, unmanaged vendors. Replay the SC Media webcast with @sawaba.bsky.social, @hdm.io & @todb.hugesuccess.org to learn why continuous discovery matters & how attackers exploit what you can’t see. 👉 www.runzero.com/resources/as...

🎙️ The Hacker's Cache: Kyser Clark talks with Metasploit creator @hdm.io on why CVEs won’t save you in 2025. They get into non-CVE vulns, hidden SSH risks, attacker innovation, AI’s impact, and why exposing version numbers can improve security. 👉 www.runzero.com/resources/wh...

On the latest Risky Biz, @patrick.risky.biz, and @hdm.io talk about visualizing the attack surface with runZeroHound, why you can't synthesize what runZero delivers, & how we are leveraging AI to help predict risks and scan smarter. 📺 Watch the full interview: www.runzero.com/resources/ri...

📺 Live webcast Dec 3 with SC Media! Your attack surface doesn’t end at the firewall. Join @hdm.io, @todb.hugesuccess.org, and @sawaba.bsky.social to learn how continuous discovery + attack path mapping keeps you ahead. 👉 www.scworld.com/cybercast/at...

🧭 Cybersecurity’s old rules are cracking. In his SecTor keynote, @hdm.io breaks down the rules that shaped the 2000s: what survived, what failed us, and the new rules we’ll need next. Missed it? 👀 Watch the keynote: www.runzero.com/resources/on...

The CFP for SO-CON 2026 closes in about 12 hours (11:59 2025-11-15)! Have a cool approach to attack path management (or awesome connector for BloodHound OpenGraph)? Submit ASAP: specterops.io/so-con/

The clever folks at Grumpy Goose Labs have published even more ways to identify unauthorized IP KVMs across your environment, with some great memes to boot! Be KVM, Do Fraud - blog.grumpygoose.io/be-kvm-do-fr...

Your attack surface is sprawling & full of blind spots. 🎥 On Dec 3 at 2 PM ET, SC Media brings together @hdm.io, @todb.hugesuccess.org, & @sawaba.bsky.social to reveal how to operationalize attack surface management without losing your mind. 👉 Register here: www.scworld.com/cybercast/at...

runZero Hour is one week away! Join us on Nov 19: @todb.hugesuccess.org, Rob King, @hdm.io, and Jared Atkinson ( CTO @specterops.io ) break down attacker movement, graph analysis, runZeroHound, and this month’s top vulnerabilities. 👉 Register here: www.runzero.com/research/run...

🚨Your secure enclave? More of a suggestion than a guarantee. If you were expecting TEEs to provide private computing in untrusted data centers, this latest article by @arstechnica.com featuring our Founder & CEO @hdm.io is a must-read: arstechnica.com/security/202...

Identify insecure TLS services with the enhanced runZero Certificate Inventory: www.runzero.com/blog/identif...

🎃 Happy Halloween! The end of #CybersecurityAwarenessMonth means it's time for our EoL-palooza grand finale! The scariest find? A surge of End-of-Life Proxmox systems... software zombies attackers feast on. 🧟‍♂️ @hdm.io has the guide to hunt them down: www.runzero.com/blog/managin...

Austin Hackers Anonymous (AHA) is TONIGHT (2025-10-30) takeonme.org - Have some zero-day to share? AHA is an official CNA and will issue CVEs for vulnerabilities disclosed at the meeting. I'm planning to demo more SSHamble.com findings along with BloodHound OpenGraph stuff. See yall soon!

So this story is super duper interesting for a whole ton of reasons, but one big one is its a very rare glimpse into the private valuation of high-end exploits held by major defense contractors bsky.app/profile/lega...

Just like chocolate and peanut butter, runZero and BloodHound are an amazing combination. Today we are introducing runZeroHound - an open source toolkit for bringing runZero Asset Inventory data into BloodHound attack graphs: www.runzero.com/blog/introdu...

It's the spooky season, so several of my ebooks are on sale. 💀🎃🪦 Aloha from Hell appears to be $2.99 everywhere, and The Secrets of Insects is $6.99. Dead Set and King Bullet are $1.99 each on Amazon. US only

SpecterOps released "DumpGuard" along with a detailed article on how they were able to bypass Windows Credential Guard in both privileged and unprivileged contexts. I learned a ton about Isolated LSA and friends: specterops.io/blog/2025/10...

Our new website has launched. We will continue to update the site with information as it becomes available. https://bsidespyongyang.com/

🎙️ Join @hdm.io, @todb.hugesuccess.org & @sawaba.bsky.social for a live SC Media webcast: “Fixing a Broken System: Why Legacy Vulnerability Management Tools Can’t Keep Up” Learn what’s next for exposure & attack surface management. 📅 Oct 29 ⏰ 2 PM ET 🔗 www.scworld.com/cybercast/fi...

I ♥️ encryption

Today's runZero Hour is up with Rob King, Tod Beardsley, and EOL expert and technology necromancer, captn3m0 (pronounced “nemo”). They will summon and explore runZero’s latest research paper, “Undead by design: Benchmarking end-of-life operating systems”: www.youtube.com/watch?v=BXBb...

JawnCon (jawncon.org) 0x02 just wrapped! I wish I could make it this year, but settled for catching the talks on the live stream: Main Stage Day 1: www.youtube.com/live/Cvf-mAd... Man Stage Day 2: www.youtube.com/watch?v=bcr6... Classroom Day 2: www.youtube.com/watch?v=1aML...

Hello Austin Gophers! Join us tonight, Wednesday, October 8th, 2025 for two hours of lightning talks and discussion at the ATX Go meetup. This is hosted by Capital Factory and runs from 6:30 PM to 8:30 PM central (with pizza and drinks!): www.meetup.com/atxgolang/ev...

🛡️ The attacker *will* get in. The real fight starts after the phish bites. Learn how to stop lateral movement, harden internal pathways, and make your network an attacker’s nightmare. 👉 Read: www.runzero.com/blog/how-to-...

New Mic-E-Mouse technique turns your optical mouse into a microphone that records conversations sites.google.com/view/mic-e-m...

🎙️ New Alice & Bob podcast by @BeyondTrust: runZero founder & CEO @hdm.io joins James Maude & @marcmaiffret.bsky.social to share how he went from dumpster-diving teen to cybersecurity pioneer 🎧 Listen: www.runzero.com/resources/al...

@SectorCa 2025 is fantastic! I last attended in 2008 and holy cow has it grown. Great to see Brian and Bruce still involved. Excellent talks, really sharp crowd, zero attitude, and everyone is incredibly friendly. You can find the slides from my morning keynote at hdm.io/decks/Sector...

✨ New report: Undead by design ✨ Zombie OSes aren’t just outdated, they’re risky. On Oct 14, Windows 10 goes EOL & 1/3 of Windows assets lose support. @todb.hugesuccess.org reveals how to protect your org: 👉 Read the (ungated!) report: www.runzero.com/resources/un...

🎙️ Risky Business Soap Box: @hdm.io chats with @patrick.risky.biz on why the old vuln mgmt playbook fails + what keeps defenders up at night: 🔍 Accurate vuln reads w/o spraying creds 🤝 Signals from EDR (not silos) ☁️ Cloud visibility where blind spots pile up 👉 www.runzero.com/resources/ri...

🍁 runZero is at SecTor! 🎤 Rob King — spotting counterfeit devices (Wed 4:15pm, Rm 716B) 🎤 @hdm.io — rules of cybersecurity (Thu 9am, Hall F) 🍻 HH w/@greynoise.io (Wed 6–8pm, The Pint) 👉RSVP: www.runzero.com/sector-happy... ✅ Register: sector.informafestivals.com/2025/

The CVE program nearly lost its funding. Cue the collective InfoSec panic. But only ~20% of incidents start with a CVE exploit. The rest? Misconfigs + bad segmentation exposures tools shrug at. @todb.hugesuccess.org explores what a post-CVE world might mean: www.runzero.com/blog/grappli...

📺 Join us today for the Security Week virtual Attack Surface Management Summit! Tune in for @hdm.io's keynote on "Rewriting the Rules of Exposure Management" to hear why traditional approaches keep failing and why we need a better way to manage vulns. asmsummit.securityweek.com/en/

In this new episode of Risky Business, Pat Gray and @hdm.io unpack the transformation of runZero into a full-blown vuln management platform. Tune in to get Pat's take on our unconventional approach to scanning -- without spraying credentials all over your network. www.runzero.com/resources/ri...

Hello Austin Gophers! Join us tonight, Wednesday, September 10th, 2025 for two hours of lightning talks and discussion at the ATX Go meetup. This meetup is hosted by Capital Factory and runs from 6:30 PM to 8:30 PM CDT (with pizza and drinks!): www.meetup.com/atxgolang/ev...

Looking forward to seeing all you hackers in meatspace! I'm bouncing between tracks and sharing slides (Unconference today + Track 2 tomorrow) on the Discord. If you're at @blueteamcon.com this weekend, please say hi, I look like this:

Hello Austin-area software engineers (or aspiring engineers)! Join us tonight, Wednesday, August 13, 2025 for two hours of lightning talks and discussion at the ATX Go meetup. This meetup is hosted by Capital Factory and runs from 6:30 PM to 8:30 PM CDT: www.meetup.com/atxgolang/ev...

If you missed this talk at BH/DC last week, it's worth a read: "From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion". Awesome work from Shu-Hao, Tung (123ojp) covering practical attacks on GRE and VxLAN tunnels: media.defcon.org/DEF%20CON%20...

Blue Team Con (@blueteamcon.com) is only three weeks away! I'm excited to share "The Death and Rebirth of Vulnerability Management", an analysis of coverage, tradeoffs, and efficacy across vulnerability scanners, endpoint agents, and open source security tools. blueteamcon.com/directory/th...

The legendary @hdm.io was @defcon.bsky.social this year (of course!) and revealed some critical challenges in widely used SSH protocol and provider recommendations on how to make it better. @networkworld.bsky.social www.networkworld.com/article/4038...

Blue Team Con is just three weeks away!

Great talk on community building by @hdm.io and @circuitswan.bsky.social at the @dianainitiative.bsky.social. Definitely one of those talks that I didn’t know I needed till I was there. #defcon33 #CommunityBuilding