See what we're thinking about, working on, & blogging about.

Explore the latest insights, ideas, & opinions from our talented team of experts & researchers.

Lights Out: The server in your server, exposed and disclosed runZero Research

runZero discloses critical authentication bypass and privilege escalation flaws in OpenBMC IPMI implementations. Here’s what you need to know.

Subscribe Now

Get our latest Rapid Responses, insights, and blogs delivered directly to your inbox.

Welcome to the club! Your subscription to our newsletter is successful.

Rapid Response
How to find Gitea installations on your network
August 25, 2026
Gitea disclosed that certain versions of Gitea are affected by a RCE vulnerability within the diffpatch feature. Here's how to find affected assets.
Rapid Response
How to find Zimbra installations on your network
August 24, 2026
Zimbra discloses critical unauthenticated RCE flaw CVE-2026-73570 (CVSS 8.9). Learn how SMTP snmp_notify exploits occur and upgrade to 10.1.20...
Rapid Response
How to find Red Hat Keycloak instances on your network
August 24, 2026
Red Hat disclosed a critical Keycloak vulnerability (CVE-2026-18963, CVSS 9.1) enabling full account takeover. Here's how to find impacted assets.
runZero Perspective
From streets to supply lines: the unforeseen risks of exposed IP cameras
August 20, 2026
Russian state actors are exploiting exposed IP cameras to track supply lines. Learn how to identify hidden IoT risks and secure your network with...
Rapid Response
How to find VMware vCenter assets on your network
August 18, 2026
Broadcom disclosed multiple vulnerabilities affecting certain versions of VMware vCenter. Here's how to find impacted assets on your network.
Rapid Response
How to find Apple macOS on your network
August 18, 2026
Apple disclosed certain versions of macOS Screen Sharing are affected by an authentication bypass vulnerability, due to underlying state management...
Life at runZero
Desert heat, dragons & cyber quests: How the runZero Yetis took over Las Vegas
August 14, 2026
BSides LV, Black Hat, DEF CON 34: see how runZero rocked Hacker Summer Camp 2026 with epic quests, a new open-source tool, and HD Moore’s BMC...
Rapid Response
How to find Metabase installations on your network
August 11, 2026
Metabase disclosed that certain versions of Metabase are affected by a critical SQL injection vulnerability. Here's how to find affected assets...
Rapid Response
BMC vulnerabilities - runZero Research
August 5, 2026
runZero has identified multiple vulnerabilities across major BMC implementations that expose BMC management subsystems to unauthorized control or...
Use Cases
Uncovering the invisible: meet runZero at DoDIIS
August 2, 2026
Heading to DoDIIS? Visit runZero at booth #1237 to learn how our uncredentialed asset discovery simplifies federal network assessments and compliance.
Product
runZero 5.1 is here: Secure AI workflows, enhanced integrations, and expanded autonomous discovery
July 31, 2026
runZero 5.1 takes on the heavy lifting across five key areas, enabling you to unmask and remediate exposures with less friction and more speed.
Rapid Response
How to find JetBrains TeamCity installations on your network
July 30, 2026
JetBrains disclosed that certain versions of TeamCity On-Premises are affected by a RCE vulnerability exploitable via the server's agent polling...