runZero Perspective

Thought-provoking takes on cybersecurity trends and industry shifts.


runZero Perspective
Not just the score: why EPSS volatility might be the signal you’re missing
May 27, 2025
We fixate on the number, but the change — the volatility — often reveals more than the number itself. That's where the real signal may lie.
runZero Perspective
Ports Behaving Badly: Uncovering Risky Protocols in Unexpected Places
May 12, 2025
We’re shining a light on the strange, surprising, and straight-up dangerous services hiding across your environment — and how you can use runZero...
runZero Perspective
One Asset, Many Risks: Prioritizing the Stack Instead of the CVEs
April 29, 2025
runZero surfaces stacked, asset-level risks—like misconfigurations, EOL software, and weak segmentation—that traditional vulnerability scanners...
runZero Perspective
Only Four Shopping Days Left Until RSAC!
April 24, 2025
In which Tod assures his fellow nerds that RSA Conference isn’t just for marketing hypesters.
runZero Perspective
Ditch vulnerability scanners: A smarter approach to exposure management with runZero alongside endpoint agents
April 22, 2025
Ditch your vulnerability scanners. Leverage your endpoint agents for authenticated discovery. Use runZero for everything else. It's exposure...
runZero Perspective
CVE Marches On
April 16, 2025
On April 15, 2025, the CVE program faced sudden shutdown fears — but CISA stepped in with last-minute funding. Crisis averted, for now.
runZero Perspective
VulnCon 2025 Wrapup
April 14, 2025
Last week, I got to see friends, enjoy Carolina barbecue, and hang out with super smart, fun people. VulnCon has turned out to be one of the most...
runZero Perspective
Sound & Fury: Revisiting Apache Tomcat & next.js
April 4, 2025
A reflection on recent high-profile vulnerabilities in next.js and Apache Tomcat just before VulnCon 2025, and why even with high scores and PoCs,...
runZero Perspective
Stormy with a chance of runZero
March 4, 2025
runZero and GreyNoise, together at last on Storm Watch
runZero Perspective
Ensure compliance with DORA’s ICT risk framework using runZero
November 27, 2024
Learn how to uncover unmanaged and unknown assets— including IT, OT, and IoT— to meet DORA's hidden risk requirements using runZero.
runZero Perspective
Evolving from IT to IoT: Flax Typhoon preyed on the lesser knowns
September 26, 2024
A look at Flax Typhoon's latest operations, and how runZero’s unknown and IoT asset visibility can help calm the storm for security teams.
runZero Perspective
How runZero finds unmanaged devices on your network
September 20, 2024
How do you find unmanaged devices on your network when they aren't accounted for? Learn how you can use runZero to find unmanaged devices on your...