runZero Perspective

Thought-provoking takes on cybersecurity trends and industry shifts.


runZero Perspective
BOD 26-04: A new era of prioritized remediation
June 10, 2026
A complete breakdown of CISA's BOD 26-04 directive. Learn how the shift to SSVC, risk-based KEV prioritization, and 3-day remediation impacts your...
runZero Perspective
Beyond bugs: 69% of initial access events aren’t bug-driven
June 9, 2026
While exploits are rising, they still don't make up the majority of breaches. Read our initial impressions of the 2026 DBIR and the reality of...

Subscribe Now

Get the latest news and expert insights delivered in your inbox.

Welcome to the club! Your subscription to our newsletter is successful.

runZero Perspective
Dawn of the apex agentic adversary
June 2, 2026
When agentic AI can weaponize exploits in seconds, visibility is everything. Stop the predator with runZero’s exposure management for the AI-attack...
runZero Perspective
LLMs are dual use, so use them
May 27, 2026
AI is flooding vulnerability handlers with bug reports. Discover how automation, security.txt, and AI-driven triage can help us fight fire with fire.
runZero Perspective
OT and Zero Trust: First things first
May 14, 2026
New guidance from CISA and the DoD adapts Zero Trust principles for OT systems. Learn why OT remains a target and how to safely map your attack...
runZero Perspective
Dispatch from VulnCon: AI, CVEs, & cooperation
April 20, 2026
todb shares his key VulnCon 2026 takeaways, covers the rise of AI in vuln research, the role of CISA’s Vulnrichment, and the future of the CVE...
runZero Perspective
The network you think you have isn't the one you actually have
March 3, 2026
The air gap is dead, and the illusion of segmentation is very much alive. Learn why segmentation fails, and how to actually secure your network.
runZero Perspective
Six things we’re expecting for cybersecurity in 2026
January 15, 2026
Now we’re all back at work and the holidays are a distant memory, we’ve had a chance to take stock of the traditional annual rush of end-of-year...
runZero Perspective
All American CVE Rejects
January 8, 2026
How big is the CVE dispute problem, really? Tod Beardsley analyzes the frequency of rejected and disputed CVEs to clear up the confusion.
runZero Perspective
Our new year's resolution: forge a better path for vulnerability management
December 31, 2025
In this year-end blog post, HD Moore discusses why traditional vulnerability management is broken and how runZero is forging a better path forward.
runZero Perspective
Fun podcast episodes of 2025 with HD Moore
December 22, 2025
From reverse-engineering Air Force software as a teen to redefining exposure management today, here's our favorite 2025 podcast appearances...
runZero Perspective
Our team’s favorite hacker toys of 2025
December 1, 2025
We asked our security researchers about their favorite hacker gadgets that spark their curiosity and inspire after-hours experimentation.