runZero Research

Deep technical dives and original findings from the runZero Research Team.


runZero Research
RDP security: The impact of secure defaults and legacy protocols
September 18, 2024
Explore the evolution of the Remote Desktop Protocol to become secure by default and learn how to audit your environment for risky RDP configurations.
runZero Research
Proven fingerprinting techniques for effective attack surface management
September 4, 2024
Precise asset identification is critical for effective cyber asset attack surface management. See how runZero’s techniques are unmatched.
runZero Research
How to detect SSH key reuse
August 29, 2024
Unmanaged SSH keys leaves networks vulnerable to cyber attacks. Learn how Zero helps with auditing SSH keys to reduce unnecessary exposures on your...
runZero Research
End-of-life assets: managing risks in outdated technology
August 19, 2024
Outdated assets create a more accessible entry point for attackers to exploit your attack surface. Learn how the runZero Platform effectively...
runZero Research
Cyber asset management in the era of segmentation decay
August 14, 2024
Network segmentation faces limitations with modern equipment. See how a CAASM approach can improve asset discovery and threat protection.
runZero Research
Unusual Assets: The riskiest factor in attack surface management
July 31, 2024
runZero’s research finds outlier assets, even if just slightly unusual, are often significantly riskier than others. The outlier score gives...
runZero Research
Active Asset Discovery in OT networks: runZero and the NREL/CECA Report
July 26, 2024
The Cohort 2 report describes how runZero safely discovers devices in a large, complex OT/ICS environment. Learn more about runZero's discovery...
runZero Research
SSHamble: Unexpected exposures in the Secure Shell
July 23, 2024
We conducted a deep dive into the SSH ecosystem and identified vulnerabilities across a wide range of implementations. During the research process,...
runZero Research
Attack Surface Challenges with OT/ICS and Cloud Environments
July 19, 2024
Learn why successfully navigating changes to operational technology and cloud attack surfaces is critical for successful asset security.
runZero Research
One ping to find them: lean network discovery
June 14, 2022
Our engineering team focuses on getting the maximum amount of information from the network while sending as little traffic as possible.
runZero Research
Security Surprises with SNMP v3
October 8, 2021
SNMP v3 has been the official version of the protocol since 2004, but still holds a few surprises when it comes to information exposure. Read our...
runZero Research
Fingerprinting Windows build numbers
September 30, 2021
Our goal at Rumble is to help customers identify everything on their networks, quickly, and without authentication. This process is driven by...