runZero Research

Deep technical dives and original findings from the runZero Research Team.


runZero Research
How to use the KEV collider: A quick tour
February 12, 2026
Layer signals and test filters to see risk indicators interact across the KEV catalog in real time. No install. No creds. Just open & start...
runZero Research
Making the CISA KEV actionable for real-world risk
February 5, 2026
If you want to understand what the KEV is actually telling you, read our new KEVology report, then take the analysis into the lab with the KEV...

Subscribe Now

Get the latest news and expert insights delivered in your inbox.

Welcome to the club! Your subscription to our newsletter is successful.

runZero Research
The runZero CNA is the newest CVE Numbering Authority!
December 10, 2025
runZero is now officially a CVE Numbering Authority!
runZero Research
Winpocalypse: One month later, the zombies are multiplying
November 19, 2025
We’re just over a month out from the Winpocalypse, where all Windows 10 operating systems technically went end-of-life. Let's talk about it.
runZero Research
runZero Hour recap: Beyond the veil with end-of-life OSes
October 28, 2025
In this episode, we talk about everything from current programming languages to mysterious firmware to, of course, the natural process of degrading...
runZero Research
Windows 10 EOL: A Winpocalypse just like Y2K
October 9, 2025
The end of Windows 10 is here, and with it comes a surge of exploitable systems. Move fast and find your exposures before attackers do with runZero.
runZero Research
From legacy to liability: New research report on end-of-life assets
October 1, 2025
End-of-life (EOL) operating systems don’t just fade away. They linger in enterprise networks like the undead — unchanging, unpatched, and...
runZero Research
Fast ≠ careless: cutting exposure time without breaking things
September 26, 2025
This month’s runZero Hour wasn’t just another CVE rundown. We went deeper to uncover what it means to move fast without breaking things.
runZero Research
Grappling with a post-CVE world
September 25, 2025
The writing is on the wall: an over-reliance on CVEs and agent-based approaches won’t keep you safe. So what else can you do to regain the upper hand?
runZero Research
Webcast recap: see + secure everything in your OT environment
September 17, 2025
A recap of last week’s webcast, where the runZero research team dug into the hard-earned lessons of managing sensitive OT environments.
runZero Research
runZero Hour, ep. 21 recap: highlights from Hacker Summer Camp
August 26, 2025
Our top insights, tools and stories from Hacker Summer Camp 2025.
runZero Research
Introducing EPSS Pulse: monitoring volatility in vulnerability risk
August 7, 2025
Learn about the origins of EPSS Pulse — the free tool that highlights recent 'fast movers' among EPSS-evaluated, CVE-identified vulnerabilities.