It's time for our first ATX Gopher meetup of the year! If you are in Austin and write Go code (or would like to start), please join us at 6:30pm at Station Austin (co-located with Capital Factory). Charles and I will be providing pizza and drinks as usual: www.meetup.com/atxgolang/ev...

🎧 We collected some of our favorite podcasts of 2025 featuring @hdm.io for you to enjoy. 📺 So go ahead and get yourself some coffee (or hot cocoa!) & watch here: www.runzero.com/blog/fun-pod...

Exposure is everywhere now — cloud, SaaS, IoT, shadow IT, unmanaged vendors. Replay the SC Media webcast with @sawaba.bsky.social, @hdm.io & @todb.hugesuccess.org to learn why continuous discovery matters & how attackers exploit what you can’t see. 👉 www.runzero.com/resources/as...

🎙️ The Hacker's Cache: Kyser Clark talks with Metasploit creator @hdm.io on why CVEs won’t save you in 2025. They get into non-CVE vulns, hidden SSH risks, attacker innovation, AI’s impact, and why exposing version numbers can improve security. 👉 www.runzero.com/resources/wh...

On the latest Risky Biz, @patrick.risky.biz, and @hdm.io talk about visualizing the attack surface with runZeroHound, why you can't synthesize what runZero delivers, & how we are leveraging AI to help predict risks and scan smarter. 📺 Watch the full interview: www.runzero.com/resources/ri...

📺 Live webcast Dec 3 with SC Media! Your attack surface doesn’t end at the firewall. Join @hdm.io, @todb.hugesuccess.org, and @sawaba.bsky.social to learn how continuous discovery + attack path mapping keeps you ahead. 👉 www.scworld.com/cybercast/at...

🧭 Cybersecurity’s old rules are cracking. In his SecTor keynote, @hdm.io breaks down the rules that shaped the 2000s: what survived, what failed us, and the new rules we’ll need next. Missed it? 👀 Watch the keynote: www.runzero.com/resources/on...

The CFP for SO-CON 2026 closes in about 12 hours (11:59 2025-11-15)! Have a cool approach to attack path management (or awesome connector for BloodHound OpenGraph)? Submit ASAP: specterops.io/so-con/

The clever folks at Grumpy Goose Labs have published even more ways to identify unauthorized IP KVMs across your environment, with some great memes to boot! Be KVM, Do Fraud - blog.grumpygoose.io/be-kvm-do-fr...

Your attack surface is sprawling & full of blind spots. 🎥 On Dec 3 at 2 PM ET, SC Media brings together @hdm.io, @todb.hugesuccess.org, & @sawaba.bsky.social to reveal how to operationalize attack surface management without losing your mind. 👉 Register here: www.scworld.com/cybercast/at...

runZero Hour is one week away! Join us on Nov 19: @todb.hugesuccess.org, Rob King, @hdm.io, and Jared Atkinson ( CTO @specterops.io ) break down attacker movement, graph analysis, runZeroHound, and this month’s top vulnerabilities. 👉 Register here: www.runzero.com/research/run...

🚨Your secure enclave? More of a suggestion than a guarantee. If you were expecting TEEs to provide private computing in untrusted data centers, this latest article by @arstechnica.com featuring our Founder & CEO @hdm.io is a must-read: arstechnica.com/security/202...

Identify insecure TLS services with the enhanced runZero Certificate Inventory: www.runzero.com/blog/identif...

🎃 Happy Halloween! The end of #CybersecurityAwarenessMonth means it's time for our EoL-palooza grand finale! The scariest find? A surge of End-of-Life Proxmox systems... software zombies attackers feast on. 🧟‍♂️ @hdm.io has the guide to hunt them down: www.runzero.com/blog/managin...

Austin Hackers Anonymous (AHA) is TONIGHT (2025-10-30) takeonme.org - Have some zero-day to share? AHA is an official CNA and will issue CVEs for vulnerabilities disclosed at the meeting. I'm planning to demo more SSHamble.com findings along with BloodHound OpenGraph stuff. See yall soon!

So this story is super duper interesting for a whole ton of reasons, but one big one is its a very rare glimpse into the private valuation of high-end exploits held by major defense contractors bsky.app/profile/lega...

Just like chocolate and peanut butter, runZero and BloodHound are an amazing combination. Today we are introducing runZeroHound - an open source toolkit for bringing runZero Asset Inventory data into BloodHound attack graphs: www.runzero.com/blog/introdu...

It's the spooky season, so several of my ebooks are on sale. 💀🎃🪦 Aloha from Hell appears to be $2.99 everywhere, and The Secrets of Insects is $6.99. Dead Set and King Bullet are $1.99 each on Amazon. US only

SpecterOps released "DumpGuard" along with a detailed article on how they were able to bypass Windows Credential Guard in both privileged and unprivileged contexts. I learned a ton about Isolated LSA and friends: specterops.io/blog/2025/10...

Our new website has launched. We will continue to update the site with information as it becomes available. https://bsidespyongyang.com/

🎙️ Join @hdm.io, @todb.hugesuccess.org & @sawaba.bsky.social for a live SC Media webcast: “Fixing a Broken System: Why Legacy Vulnerability Management Tools Can’t Keep Up” Learn what’s next for exposure & attack surface management. 📅 Oct 29 ⏰ 2 PM ET 🔗 www.scworld.com/cybercast/fi...

I ♥️ encryption

Today's runZero Hour is up with Rob King, Tod Beardsley, and EOL expert and technology necromancer, captn3m0 (pronounced “nemo”). They will summon and explore runZero’s latest research paper, “Undead by design: Benchmarking end-of-life operating systems”: www.youtube.com/watch?v=BXBb...

JawnCon (jawncon.org) 0x02 just wrapped! I wish I could make it this year, but settled for catching the talks on the live stream: Main Stage Day 1: www.youtube.com/live/Cvf-mAd... Man Stage Day 2: www.youtube.com/watch?v=bcr6... Classroom Day 2: www.youtube.com/watch?v=1aML...

Hello Austin Gophers! Join us tonight, Wednesday, October 8th, 2025 for two hours of lightning talks and discussion at the ATX Go meetup. This is hosted by Capital Factory and runs from 6:30 PM to 8:30 PM central (with pizza and drinks!): www.meetup.com/atxgolang/ev...

🛡️ The attacker *will* get in. The real fight starts after the phish bites. Learn how to stop lateral movement, harden internal pathways, and make your network an attacker’s nightmare. 👉 Read: www.runzero.com/blog/how-to-...

New Mic-E-Mouse technique turns your optical mouse into a microphone that records conversations sites.google.com/view/mic-e-m...

🎙️ New Alice & Bob podcast by @BeyondTrust: runZero founder & CEO @hdm.io joins James Maude & @marcmaiffret.bsky.social to share how he went from dumpster-diving teen to cybersecurity pioneer 🎧 Listen: www.runzero.com/resources/al...

@SectorCa 2025 is fantastic! I last attended in 2008 and holy cow has it grown. Great to see Brian and Bruce still involved. Excellent talks, really sharp crowd, zero attitude, and everyone is incredibly friendly. You can find the slides from my morning keynote at hdm.io/decks/Sector...

✨ New report: Undead by design ✨ Zombie OSes aren’t just outdated, they’re risky. On Oct 14, Windows 10 goes EOL & 1/3 of Windows assets lose support. @todb.hugesuccess.org reveals how to protect your org: 👉 Read the (ungated!) report: www.runzero.com/resources/un...

🎙️ Risky Business Soap Box: @hdm.io chats with @patrick.risky.biz on why the old vuln mgmt playbook fails + what keeps defenders up at night: 🔍 Accurate vuln reads w/o spraying creds 🤝 Signals from EDR (not silos) ☁️ Cloud visibility where blind spots pile up 👉 www.runzero.com/resources/ri...

🍁 runZero is at SecTor! 🎤 Rob King — spotting counterfeit devices (Wed 4:15pm, Rm 716B) 🎤 @hdm.io — rules of cybersecurity (Thu 9am, Hall F) 🍻 HH w/@greynoise.io (Wed 6–8pm, The Pint) 👉RSVP: www.runzero.com/sector-happy... ✅ Register: sector.informafestivals.com/2025/

The CVE program nearly lost its funding. Cue the collective InfoSec panic. But only ~20% of incidents start with a CVE exploit. The rest? Misconfigs + bad segmentation exposures tools shrug at. @todb.hugesuccess.org explores what a post-CVE world might mean: www.runzero.com/blog/grappli...

📺 Join us today for the Security Week virtual Attack Surface Management Summit! Tune in for @hdm.io's keynote on "Rewriting the Rules of Exposure Management" to hear why traditional approaches keep failing and why we need a better way to manage vulns. asmsummit.securityweek.com/en/

In this new episode of Risky Business, Pat Gray and @hdm.io unpack the transformation of runZero into a full-blown vuln management platform. Tune in to get Pat's take on our unconventional approach to scanning -- without spraying credentials all over your network. www.runzero.com/resources/ri...

Hello Austin Gophers! Join us tonight, Wednesday, September 10th, 2025 for two hours of lightning talks and discussion at the ATX Go meetup. This meetup is hosted by Capital Factory and runs from 6:30 PM to 8:30 PM CDT (with pizza and drinks!): www.meetup.com/atxgolang/ev...

Looking forward to seeing all you hackers in meatspace! I'm bouncing between tracks and sharing slides (Unconference today + Track 2 tomorrow) on the Discord. If you're at @blueteamcon.com this weekend, please say hi, I look like this:

Hello Austin-area software engineers (or aspiring engineers)! Join us tonight, Wednesday, August 13, 2025 for two hours of lightning talks and discussion at the ATX Go meetup. This meetup is hosted by Capital Factory and runs from 6:30 PM to 8:30 PM CDT: www.meetup.com/atxgolang/ev...

If you missed this talk at BH/DC last week, it's worth a read: "From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion". Awesome work from Shu-Hao, Tung (123ojp) covering practical attacks on GRE and VxLAN tunnels: media.defcon.org/DEF%20CON%20...

Blue Team Con (@blueteamcon.com) is only three weeks away! I'm excited to share "The Death and Rebirth of Vulnerability Management", an analysis of coverage, tradeoffs, and efficacy across vulnerability scanners, endpoint agents, and open source security tools. blueteamcon.com/directory/th...

The legendary @hdm.io was @defcon.bsky.social this year (of course!) and revealed some critical challenges in widely used SSH protocol and provider recommendations on how to make it better. @networkworld.bsky.social www.networkworld.com/article/4038...

Blue Team Con is just three weeks away!

Great talk on community building by @hdm.io and @circuitswan.bsky.social at the @dianainitiative.bsky.social. Definitely one of those talks that I didn’t know I needed till I was there. #defcon33 #CommunityBuilding

Thank you to everyone who made it out for my DEF CON 33 presentation, "Shaking Out Shells With SSHamble", you can find the materials online at hdm.io/decks/MOORE%... This deck includes some lightly-censored zero-day (more decks @ hdm.io)

Are you an Austin-area software engineer who writes Go (or aspires to become one)? Join us Wednesday, August 13, 2025 for two hours of lightning talks and discussion. This meetup is hosted by Capital Factory and runs from 6:30 PM to 8:30 PM CDT: www.meetup.com/atxgolang/ev...

Hello DEF CON! Tomorrow (Saturday/August 9th) I'll be speaking with Nicole Schwartz on Forging Strong Cyber Communities in Uncertain Times at 1pm in W205 (TDI) and then shortly after on Shaking Out Shells with SSHamble at 3pm in Track 2 (LV1), with even more shells. Hope to see you there!

BSides Las Vegas 2025 is incredible. Amazing turn-out, fantastic staff, and the sheer variety of content, speakers, and activities sets the bar for what a hacker con should be. You can find the slides from my talk, "Turbo Tactical Exploitation: 22 Tips for Tricky Targets" at hdm.io/decks/BSides...

Kicking off Hacker Summer Camp with a 🔥 session at @bsideslv.org! @hdm.io takes the stage for a turbo-charged talk. Take a whirlwind tour through 22 practical exploitation tips faster than you can say SYN/ACK-ACK. 📍 The Tuscany, Ground Floor 🕚 11am 🔗 www.runzero.com/bsides-las-v...

🦄 Coming up at @dianainitiative.bsky.social: How do we build resilient, inclusive networks that last? Join @hdm.io & TDI board member @circuitswan.bsky.social at 3pm PDT for: 🎙️ Forging Strong Cyber Communities in Uncertain Times 📍 UNLV Student Union 🕒 3pm PDT 🔗 www.runzero.com/summer-camp-...