The cybersecurity landscape has reached a tipping point. For years, security teams have been caught in a cycle of reactive patching, drowning in a sea of critical vulnerabilities while struggling to maintain an accurate inventory of what they actually own. The "old way" of vulnerability management — relying on incomplete scans and legacy tools — is no longer enough to defend the modern, sprawling attack surface.

This year, we aren't just making a resolution; we’re leading a shift in strategy.

For this year-end blog post, we have rounded up a few deep-dive interviews with HD Moore, Founder and CEO of runZero, where he discusses why the traditional vulnerability management model is broken and how we can collectively forge a better path forward. HD explores the critical intersection of asset intelligence and risk, explaining why you can't secure what you can't see — and why "better" doesn't just mean more data, but more clarity.

Enjoy!

The death & rebirth of vulnerability management with HD Moore #

Throw back to RSAC when Jeff Man and HD Moore explored the state of vulnerability management. They discussed what was required to truly prevent real-world incidents and shared new perspectives that challenged the status quo. Their conversation highlighted innovative approaches that were finally overcoming decades-old problems to usher in a new era of vulnerability management.

Soap Box: runZero shakes up vulnerability management #

In this sponsored Soap Box edition of the Risky Business podcast, HD Moore joined the show to talk about runZero’s major push into vulnerability management.

With our Nuclei integration, runZero is now able to get a very accurate picture of what’s vulnerable in your environment, without spraying highly privileged credentials at attackers on your network. It can also integrate with your EDR platform, and other data sources, to give you powerful visibility into the true state of things on your network and in your cloud.

You can’t get there from here: why we need a new way to manage exposure with HD Moore #

At Black Hat 2025, CyberRisk TV sat down with HD Moore, Founder and CEO of runZero, for a no-BS conversation on why vulnerability management was still failing enterprises — and what needed to change then. Hosted by Jackie McGuire, this interview unpacked the real-world challenges that were facing security teams: tool overload, missing assets, unauthenticated exposures, and the illusion of visibility.

runZero Platform demo: vulnerability scanning and management #

In this product demo, Patrick Gray hosted Ali Cheikh as he walked through how runZero can scan for and manage the vulnerabilities that matter across your environment.

Watch the demo, then try runZero free.

We'll see you in the new year!

Written by runZero Team

Great research and development is a team effort! Multiple runZero team members collaborated on this post. Go team!

More about runZero Team
Subscribe Now

Get the latest news and expert insights delivered in your inbox.

Welcome to the club! Your subscription to our newsletter is successful.

Explore more runZero

Product
runZero 5.1 is here: Secure AI workflows, enhanced integrations, and expanded autonomous discovery
runZero 5.1 takes on the heavy lifting across five key areas, enabling you to unmask and remediate exposures with less friction and more speed.
Podcasts
Know Your Adversary with HD Moore
runZero CEO HD Moore breaks down the myth of air-gapped networks, the impact of AI on security, and why asset connectivity is everything.
runZero Perspective
BOD 26-04: A new era of prioritized remediation
A complete breakdown of CISA's BOD 26-04 directive. Learn how the shift to SSVC, risk-based KEV prioritization, and 3-day remediation impacts your...
runZero Perspective
Dawn of the apex agentic adversary
When agentic AI can weaponize exploits in seconds, visibility is everything. Stop the predator with runZero’s exposure management for the AI-attack...
Webcasts
runZero Hour, Ep. 33: Hacker Summer Camp: we survived the Vegas heat (and the bugs)
In this post-Hacker Summer Camp recap, the runZero team break down the research, tools, and trends discussed at BSides Las Vegas, Black Hat and DEF...
Podcasts
The Internet's biggest point of failure
Join Tod Beardsley on Secure & Scale as he explores the future of vulnerability management, CVE fragmentation, and how AI is changing security...
Webcasts
Mind the gaps: securing the modern IT/OT attack surface
In this webcast, HD Moore and GigaOm Analyst Chris Ray discuss key methods for hardening OT defenses and share insights from the new OT report.
Webcasts
runZero Hour, Ep. 32: AI-pocalypse now? Why the 2026 DBIR is actually good news
In this episode of runZero Hour, Tod Beardsley, Brianna Cluck, and Verizon's Alex Pinto broke down 2026 DBIR trends, AI threats, and runZero 5.0.

See Results in Minutes

See & secure your total attack surface. Even the unknowns & unmanageable.