See what we're thinking about, working on, & blogging about.

Explore the latest insights, ideas, & opinions from our talented team of experts & researchers.

How to find systems impacted by CVE-2024-3094 (XZ Utils backdoor) Rapid Response

Malicious code was pushed to the libxz-utils project that introduced a backdoor in SSH. Here's how to find potentially vulnerable systems.

Subscribe Now

Get our latest Rapid Responses, insights, & blogs delivered directly to your inbox.

Welcome to the club! Your subscription to our newsletter is successful.

Rapid Response
How to find Grafana instances
December 8, 2021
A zero-day vulnerability for Grafana, a popular analytics and visualization software, was leaked this week.
Product Release
Rumble 2.9 Compare internal and external attack surfaces
December 7, 2021
Compare assets to find exposure differences, visualize your network with updated topology reports and more.
Rapid Response
How to find HP printers and multi-function printers (MFPs)
December 3, 2021
Do you have HP printers and multi-function printers (MFPs)? You might want to look at the two recently published vulnerabilities that affect 150+...
Rapid Response
How to find Nucleus TCP/IP assets with accessible FTP services
November 10, 2021
Researchers at Forescout recently published findings on a new set of 13 vulnerabilities with the Nucleus RTOS TCP/IP stack, collectively referred...
Product Release
Rumble 2.8 Synchronize your VMware inventory, import Censys scan data, and run RFC 1918 scans faster
November 2, 2021
Integration improvements, synchronize your VMware virtual machine inventory and more.
Rapid Response
How to find PAX point-of-sale devices
October 28, 2021
PAX Technologies, a China-based company that manufactures a LOT of point-of-sale (POS) terminal devices, has been in the news this week following...
Rapid Response
How to find Apache HTTP Server instances
October 5, 2021
The Apache Software Foundation recently announced a path traversal vulnerability present in version 2.4.49 of the Apache HTTP Server software.
Product Release
Rumble 2.7 New dashboard, multi-subscription Azure, AWS ELBs, Splunk add-on improvements, and faster discovery for Rumble Professional
October 5, 2021
User experience improvement, get insights, trends, and visualizations from your dashboard, and more.
runZero Research
Fingerprinting Windows build numbers
September 30, 2021
Our goal at Rumble is to help customers identify everything on their networks, quickly, and without authentication. This process is driven by...
Rapid Response
How to find Hikvision IP cameras and recorders on your network
September 21, 2021
Newly published security research from Watchful IP reveals an unauthenticated code execution vulnerability (assigned CVE-2021-36260) present in...
Rapid Response
How to find assets running OMI services
September 17, 2021
Details on vulnerabilities present in some Azure Linux VMs, collectively referred to as “OMIGOD”, came to light this week via published research by...
Product Release
Rumble 2.6 Integrate with Microsoft Azure Cloud, identify EOL assets, self-host in offline mode, and detect more protocols
September 8, 2021
Synchronize your Azure VM inventory with Rumble and much more.
© Copyright 2024 runZero, Inc. All Rights Reserved