You can’t get there from here: why we need a new way to manage exposure

At Black Hat 2025, CyberRisk TV sits down with HD Moore, Founder and CEO of runZero, for a no-BS conversation on why vulnerability management is still failing enterprises — and what needs to change now. Hosted by Jackie McGuire, this interview dives deep into the real-world challenges facing security teams today: tool overload, missing assets, unauthenticated exposures, and the illusion of visibility.

HD reveals how attackers are exploiting blind spots faster than defenders can react — and why unauthenticated discovery is the secret weapon defenders need. From the evolution of pentesting to the pitfalls of modern tooling, this interview offers a powerful call to rethink how we manage risk.

Topics Covered:

  • Why vulnerability tools are worse today than 20 years ago
  • The myth of full visibility in enterprise security
  • How AI and Shadow IT are accelerating unauthenticated risk
  • The "garage keypad is 1234" problem in cyber hygiene
  • runZero’s unique approach: find everything, fast, without credentials
  • What every CISO needs to hear to justify better investments

If you're tired of dashboards full of false confidence and alerts that don’t matter, this is your wake-up call.

Meet Our Speakers

HD Moore

Founder & CEO, runZero

Subscribe Now

Get the latest news and expert insights delivered in your inbox.

Welcome to the club! Your subscription to our newsletter is successful.


Related Resources

Podcasts
We need to talk about KEV with Tod Beardsley (Decipher podcast)
Tod Beardsley joins Dennis Fisher to talk about the evolution of the KEV catalog, how much value you should place on the KEV, and his new KEVology...
Podcasts
Only a third of KEV vulnerabilities are truly critical; are you prioritizing the wrong ones?
Discover how KEVology and the KEV Collider help defenders cut through the noise by enriching KEV data with exploit scores, timelines, & real-world...
Podcasts
Filtering the KEV was really hard … until now! (Risky Biz Interview)
Casey Ellis chats with Todd Beardsley about KEVology — an analysis of the CISA KEV. KEVology helps you identify the vulnerabilities most relevant...
Podcasts
The dangers of white label devices (Error Code Podcast)
Rob King, Director of Applied Security Research, explores white-labeled surveillance and IoT hardware, why some vendors are banned by governments,...

See Results in Minutes

See & secure your total attack surface. Even the unknowns & unmanageable.