See what we're thinking about, working on, & blogging about.

Explore the latest insights, ideas, & opinions from our talented team of experts & researchers.

Subscribe Now

Get our latest Rapid Responses, insights, and blogs delivered directly to your inbox.

Welcome to the club! Your subscription to our newsletter is successful.

Rapid Response
How to find Ivanti Sentry on your network
June 12, 2026
Ivanti disclosed that certain versions of Sentry are susceptible to two vulnerabilities. Here's how to find impacted assets.
Rapid Response
How to find Oracle PeopleSoft on your network
June 12, 2026
Oracle disclosed that certain versions of PeopleSoft are susceptible to exploitation. Here's how to find impacted assets.
runZero Perspective
BOD 26-04: A new era of prioritized remediation
June 10, 2026
A complete breakdown of CISA's BOD 26-04 directive. Learn how the shift to SSVC, risk-based KEV prioritization, and 3-day remediation impacts your...
Rapid Response
How to find Veeam software on your network
June 9, 2026
Certain versions of Veeam Backup & Replication contain a vulnerability that allows an authenticated domain user to achieve RCE on the Backup Server.
runZero Perspective
Beyond bugs: 69% of initial access events aren’t bug-driven
June 9, 2026
While exploits are rising, they still don't make up the majority of breaches. Read our initial impressions of the 2026 DBIR and the reality of...
Rapid Response
How to find LiteLLM instances on your network
June 8, 2026
LiteLLM has disclosed that certain versions of LiteLLM Proxy are susceptible to multiple vulnerabilities that can be chained together to achieve RCE.
runZero Perspective
Dawn of the apex agentic adversary
June 2, 2026
When agentic AI can weaponize exploits in seconds, visibility is everything. Stop the predator with runZero’s exposure management for the AI-attack...
Rapid Response
How to find Palo Alto Networks devices running PAN-OS
May 29, 2026
PAN has disclosed that certain versions of PAN-OS are affected by an authentication bypass vulnerability in the GlobalProtect portal and gateway.
Rapid Response
How to find Gogs installations on your network
May 29, 2026
Certain versions of Gogs are affected by an argument injection vulnerability within the pull request "Rebase before merging" style merge handling.
runZero Perspective
LLMs are dual use, so use them
May 27, 2026
AI is flooding vulnerability handlers with bug reports. Discover how automation, security.txt, and AI-driven triage can help us fight fire with fire.
Rapid Response
How to find Drupal core instances on your network
May 22, 2026
Certain versions of Drupal core are affected by a SQL injection vulnerability in the database abstraction API. Here's how to find affected assets.
Use Cases
NIS2: Don’t panic. Start preparing.
May 19, 2026
Ready for NIS2? Legacy scans won't cut it. See how runZero delivers the real-time asset visibility and attack path mapping you need to meet all 10...