See what we're thinking about, working on, & blogging about.

Explore the latest insights, ideas, & opinions from our talented team of experts & researchers.

Lights Out: The server in your server, exposed and disclosed runZero Research

runZero discloses critical authentication bypass and privilege escalation flaws in OpenBMC IPMI implementations. Here’s what you need to know.

Subscribe Now

Get our latest Rapid Responses, insights, and blogs delivered directly to your inbox.

Welcome to the club! Your subscription to our newsletter is successful.

Rapid Response
How to find Aviatrix Controller on your network
June 24, 2025
Mandiant recently disclosed two vulnerabilities in Aviatrix Controller. Here's how to find affected assets on your network.
runZero Research
CVE chaos, MCPs, and the fight for better vulnerability data: a recap of runZero Hour 19
June 24, 2025
On our latest episode of runZero Hour I sat down with Rob King and Jerry Gamblin, Principal Engineer at Cisco, to dig into the state of...
runZero Perspective
NSA proposes common-sense fixes to OT security standards
June 17, 2025
NSA has recommended six common-sense security controls for OT/ICS smart controllers in NSS. Learn what they are, why they matter and how runZero...
Product
Integrating Nuclei - runZero ‪‪❤︎‬ OSS
June 11, 2025
runZero now integrates with the open source Nuclei scanner to detect default logins across IoT, OT, IT, and DevOps apps like Tomcat, Jenkins,...
runZero Perspective
The Role of total attack surface visibility in M&A
June 3, 2025
With M&A, security teams must rapidly uncover risks. See why legacy tools fall short and how runZero ensures a secure transition.
Rapid Response
How to find Weidmüller Industrial Ethernet switches on your network
May 28, 2025
Multiple vulnerabilities have been disclosed in certain models and versions of Weidmüller Industrial Ethernet switch firmware.
Rapid Response
How to find potentially compromised ASUS routers in your network
May 28, 2025
ASUS routers exposed to the public Internet are being compromised, with backdoors being installed. Here's how to find impacted assets on your network.
runZero Perspective
Not just the score: why EPSS volatility might be the signal you’re missing
May 27, 2025
We fixate on the number, but the change — the volatility — often reveals more than the number itself. That's where the real signal may lie.
Rapid Response
How to find Trimble Cityworks on your network
May 26, 2025
A vulnerability has been disclosed in Trimble Cityworks versions prior to 23.10, with evidence that it is being actively exploited in the wild.
Rapid Response
How to find AutomationDirect Modbus Gateways on your network
May 22, 2025
A vulnerability has been disclosed in AutomationDirect MB-GATEWAY Modbus gateways, that would allow unrestricted remote access to the device.
Rapid Response
How to find Versa Networks Concerto installations on your network
May 22, 2025
Project Discovery has disclosed several vulnerabilities in Versa Concerto, a tool used to configure and monitor Versa devices in networks.
Rapid Response
How to find TP-Link Archer AX50 routers on your network
May 21, 2025
A vulnerability has been disclosed in TP-Link Archer AX50 routers. This vulnerability would allow a remote, unauthenticated attacker to execute...