runZero to join Dragos, creating an industry-transforming security platform backed by $4B Accenture investment. More →

🐉 Hang out with the runZero team at Hacker Summer Camp! Learn More
runZero CAASM

We can't wait to meet with you during Hacker Summer Camp! Join us in Las Vegas, August 3–9, for a week of exciting research, community-building, and industry insights during BSides, Black Hat, and DEF CON! Don't miss our talks, onsite teams at every venue, cool swag, and of course, the best mascot in cybersecurity, Zeti the Yeti! See you soon!

Keep scrolling for all the details ↓

Meet with runZero:

Meet us at these events:

August 3-5
BSides Las Vegas

We're an All-In sponsor at BSides LV this year! 

We'll be the ones with the really tall Yeti, plus some very hackery swag. Our technical peeps will be on standby to tell you all about our new capabilities with runZero 5.0.

Register Now
August 1-6
Black Hat USA 2026

Who needs the show floor when you have a Glacial Nexus to retreat to? Escape the vendor madness and come explore literally the coolest experience at Black Hat. You can find us across from the Business Hall entrance, right near the Starbucks in the Bayside Foyer, with a hacker challenge that will have you clamoring to reach the top of the leaderboard to claim coveted prizes.

Register Now
August 6-9
DEF CON 34

Connect with us at DEF CON as we roam through the Villages making tinfoil hats, soldering badges, and hacking all the things. 

We'll be out and about, armed with some limited edition stickers and patch keychains...cause it wouldn't be DEF CON without them.

Register Now

See our talks:

Tue, August 4 @ 2:00pm -2:30pm (Florentine A)
Mind the Gap: Bridges, Backplanes, and BloodHound
Network segmentation is a critical final line of defense, but enforcing it at scale is an immense challenge. Join HD Moore as he reveals how attackers routinely bypass firewalls by exploiting overlooked, accidental bridges, from technician laptops and smart thermostats to out-of-band management channels and exposed OT backplanes.

In this session, HD will demonstrate how to leverage identity-correlation techniques to catch dual-homed hosts hiding across multiple networks simultaneously. Discover how to feed this raw data into open-source tools like BloodHound Open Graph to map out the true, unfiltered layout of your network.
Learn More
Wed, August 5 @ 12:00pm - 12:45pm (Florentine F)
I am CVE, AMA!

Tod Beardsley returns to BSides Las Vegas to lead a spirited discussion on the past, present, and future of the CVE Program. Joining him is an expert panel featuring program sponsors Katie Trimble-Noble and Lindsey Cerkovnik, vulnerability managers Lisa Olson (MSRC) and Madison Ficorilli (GitHub Advisory DB), and data scientist Jerry Gamblin (RogoLabs).

This year, the mic belongs to you. Bring your burning questions as the panel tackles the CVE program's role in the global cybersecurity ecosystem, how it handles the onslaught of AI-discovered and AI-created vulnerabilities, and its impact from initial research to downstream applications.

Learn More
Wed, August 5 @ 3:35pm - 4:15pm (Oceanside A)
Lights Out: BMC's are Still Broken and Now We Have the Receipts

HD Moore uncovers the critical, overlooked threats hiding in your server's BMCs. Drawing from a massive scan of over 140,000 devices, HD reveals that three out of four internet-facing IPMI hosts still leak passwords and system data.

Learn how attackers are using these always-on, highly trusted devices to deploy persistent firmware implants that survive OS reinstalls, and gain access to OOBscan, a brand-new open-source IPMI auditing tool released exclusively during this session.

Learn More
Sat, August 8 @ 2pm - 3pm (LVCC - L1 - Exhibit Hall West 3 - 1006, Main Track 1)
Lights Out: Out-of-Band, Out of Mind, Out of Control
In this talk, runZero's HD Moore exposes severe flaws in BMC's, demonstrating how his team extracted password hashes from 75% of 140,000 scanned targets without credentials and bypassed "random" password laws.

HD reveals how attackers can completely neutralize network segmentation by using the internal PCIe bus to pivot from a compromised host into the management VLAN, ultimately hijacking the entire fleet.

The session concludes with a live demonstration of this devastating attack chain using their new open-source tool, OOBscan.
Learn More
Background Image

Come Hang Out with Zeti, our infamous Yeti!

Zeti's adventure continues in Las Vegas... join the fun!

If you're lucky, you might just catch a glimpse of the elusive Zeti as he continues his global escapades! Word on the street is that he’ll be diving into the best that Las Vegas has to offer. He’s on a mission to meet awesome people, take on thrilling adventures, and, as always, spread happiness and good vibes wherever he roams.

If you spot him, snap a pic and share it on the socials! 🚀✨

Follow runZero on LinkedIn
runZero CAASM
© Copyright 2026 runZero, Inc. All Rights Reserved