runZero Research

Deep technical dives and original findings from the runZero Research Team.


runZero Research
Windows 10 EOL: A Winpocalypse just like Y2K
October 9, 2025
The end of Windows 10 is here, and with it comes a surge of exploitable systems. Move fast and find your exposures before attackers do with runZero.
runZero Research
From legacy to liability: New research report on end-of-life assets
October 1, 2025
End-of-life (EOL) operating systems don’t just fade away. They linger in enterprise networks like the undead — unchanging, unpatched, and...

Subscribe Now

Get the latest news and expert insights delivered in your inbox.

Welcome to the club! Your subscription to our newsletter is successful.

runZero Research
Fast ≠ careless: cutting exposure time without breaking things
September 26, 2025
This month’s runZero Hour wasn’t just another CVE rundown. We went deeper to uncover what it means to move fast without breaking things.
runZero Research
Grappling with a post-CVE world
September 25, 2025
The writing is on the wall: an over-reliance on CVEs and agent-based approaches won’t keep you safe. So what else can you do to regain the upper hand?
runZero Research
Webcast recap: see + secure everything in your OT environment
September 17, 2025
A recap of last week’s webcast, where the runZero research team dug into the hard-earned lessons of managing sensitive OT environments.
runZero Research
runZero Hour, ep. 21 recap: highlights from Hacker Summer Camp
August 26, 2025
Our top insights, tools and stories from Hacker Summer Camp 2025.
runZero Research
Introducing EPSS Pulse: monitoring volatility in vulnerability risk
August 7, 2025
Learn about the origins of EPSS Pulse — the free tool that highlights recent 'fast movers' among EPSS-evaluated, CVE-identified vulnerabilities.
runZero Research
Reshaping security with open source: runZero's collaboration with ProjectDiscovery
July 25, 2025
ProjectDiscovery co-founders Rishi and Sandeep joined our research team to explore how open source is driving the next wave of security tooling.
runZero Research
Out-of-Band, Part 1: the new generation of IP KVMs and how to find them
June 26, 2025
We begin the series exploring security risks of OoB management devices like BMCs, serial console servers, and IP-enabled KVMs, and share how to...
runZero Research
CVE chaos, MCPs, and the fight for better vulnerability data: a recap of runZero Hour 19
June 24, 2025
On our latest episode of runZero Hour I sat down with Rob King and Jerry Gamblin, Principal Engineer at Cisco, to dig into the state of...
runZero Research
CVSS, EPSS, and SSVC: How to Read Between the Vulnerability Scores
May 15, 2025
Learn about strengths and limitations of each scoring systems – and how to best leverage them inform your triage strategy.
runZero Research
Labelling for End-of-Life Consumer IoT
March 14, 2025
IOT labelling is back on the menu, but how to actually do it is still tricky.