See what we're thinking about, working on, & blogging about.

Explore the latest insights, ideas, & opinions from our talented team of experts & researchers.

Lights Out: The server in your server, exposed and disclosed runZero Research

runZero discloses critical authentication bypass and privilege escalation flaws in OpenBMC IPMI implementations. Here’s what you need to know.

Subscribe Now

Get our latest Rapid Responses, insights, and blogs delivered directly to your inbox.

Welcome to the club! Your subscription to our newsletter is successful.

runZero Perspective
CVE, Congress, and the NDAA: A merge story
July 23, 2026
Is the U.S. gov taking over the CVE program? Learn how Amendment 812 to the FY2027 NDAA aims to modernize, fund, and restructure global vuln...
Life at runZero
Where yetis roam and dragons fly: Join runZero in Las Vegas
July 22, 2026
Get ready, Vegas! From August 3–9, the runZero Yetis will be descending on Las Vegas to join the fun at BSides Las Vegas, Black Hat, and DEF CON.
Rapid Response
How to find WordPress on your network
July 18, 2026
WordPress disclosed multiple vulnerabilities affecting the core WordPress framework. Here's how to find affected instances with runZero.
runZero Research
Six FatFs bugs, one very large blast radius
July 16, 2026
One small component, massive blast radius. Explore seven new FatFs vulnerabilities discovered via AI that impact RTOS platforms, IoT devices, and...
Rapid Response
How to find Microsoft SharePoint Server installations on your network
July 15, 2026
Security researchers and Microsoft have disclosed multiple vulnerabilities affecting versions of SharePoint Server. Here’s how to find impacted...
runZero Perspective
Has a nation-state pwned your routers?
July 14, 2026
Time for some router hygiene. Dive into the NSA's latest advisory on nation-state cyber threats and get the steps needed to protect your environment.
Rapid Response
How to find Adobe ColdFusion installations on your network
July 7, 2026
Adobe disclosed multiple vulnerabilities in their ColdFusion rapid application development product. Here's how to find affected assets with runZero.
Rapid Response
How to find BeyondTrust appliances on your network
July 7, 2026
BeyondTrust has disclosed multiple pre-authentication authorization vulnerabilities affecting certain versions of both RS and PRA.
runZero Perspective
Navigating the AI bug surge: Prep over panic
July 7, 2026
AI is helping attackers find vulnerabilities faster than ever. Learn how runZero’s Exposure Management Platform helps you outpace threats and...
Rapid Response
How to find Microsoft SQL Server installations on your network
June 30, 2026
Microsoft has disclosed three vulnerabilities in certain versions of Microsoft SQL Server. Here's how to find affected assets on your network.
Product
Announcing runZero 5.0: Exposure management built to outpace AI-driven attacks
June 25, 2026
When you're up against AI, every minute counts. Get deep, actionable intelligence across your entire attack surface to close the gaps and hold the...
runZero Research
Understanding Squidbleed, CVE-2026-47729
June 22, 2026
Squidbleed (CVE-2026-47729) is making headlines, but actual risk is low. Read our breakdown of this Squid proxy bug and how to check your inventory.