2026-08-29T19:22:14Z https://yabu.me runZero, Inc https://yabu.me/npub1jsz0sl304zzar8mg06hnp2eypk73jy2a9vcnrfe2uvjsy6vp7gvqeeghgq https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/304/320/457/215/299/original/92ffe587207b5656.png https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/304/320/457/215/299/original/92ffe587207b5656.png https://yabu.me/nevent1qqswee3q7dfz3kaf0mr2n797fpkkzj52wapxpj2je343a9lylyku5wgzyz2qf7r7975gt5vldpl27v9tysxm6xg3t54nzvd89t3j2qnfs8eps5v90fk 🚨Webinar alert - Tomorrow - Mind the Gaps: Securing the modern IT/OT attack surface<br/><br/>Register now to join GigaOm Field CTO Chris Ray and runZero CEO HD Moore tomorrow for a live webinar as they explore new methods for hardening OT defenses and discuss insights from the recent GigaOm Radar for OT Security.<br/><br/> 🗓️ Tomorrow, July 29 at 1pm ET / 10am PT<br/><br/>👉 Register today and read the report at: <a href="https://www.runzero.com/gigaom-radar-ot-security/">https://www.runzero.com/gigaom-radar-ot-security/</a><br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/998/079/967/327/998/original/83693be24784b232.webp"> <br/> 2026-07-28T14:30:24Z https://yabu.me/nevent1qqsyuw2jn2eqmtgmwus88cf2khtets7kexmlemaqsp4sds0r6wwpxaqzyz2qf7r7975gt5vldpl27v9tysxm6xg3t54nzvd89t3j2qnfs8eps44llx0 🚨 New runZero 4.9: Shatter the segmentation illusion and reveal hidden attack paths across IT and #OT environments!<br/><br/>Experience the power of our latest release:<br/><br/>📈 Interactive attack path mapping<br/>👁️ Multi-homed &amp; bridge detection<br/>🗺️ 2D/3D searchable topology<br/>🧠 Deep OT intelligence, including field-level discovery<br/>🔥 Real-world risk prioritization<br/>✅ Identify protocol exposures<br/>💻 UI/UX enhancements<br/><br/>👉 Learn more at: <a href="https://www.runzero.com/blog/runzero-4-9">https://www.runzero.com/blog/runzero-4-9</a><br/><br/>#OTsecurity<br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/493/908/707/708/552/original/bf111516e60d6e3b.mp4"></video><br/> 2026-04-30T13:33:01Z https://yabu.me/nevent1qqsq4pzm8jkggq40vkwjn6hszv6glgjhycew5rmndycy755lfrrgvxgzyz2qf7r7975gt5vldpl27v9tysxm6xg3t54nzvd89t3j2qnfs8epsu0cdde 🔎 Your attack surface isn’t where you think it is.<br/><br/> Cloud, SaaS, IoT, shadow IT, vendors — exposure now lives everywhere, and traditional scanning can’t keep up.<br/><br/>On Dec. 3, SC Media hosted a webcast with <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub19vvjtrp3pk6kpcd6lq8q9m6svpyns7nwsvezd0ensp0z7atjmhusqmd56q" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Adrian —dangerously-skip-permissions Sanabria</span> (<span class="italic">npub19vv…d56q</span>)</a></span>, <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub18pcs78pe5c63534qwvzf5c0gateeu9qk3g4grgj5n9gxn8wth8vsek787r" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>HD Moore</span> (<span class="italic">npub18pc…787r</span>)</a></span>, and <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1qzuk6k5w9ajvltt2f56pgy52uwddsf53ngmzqza6g9367jyc8cmsc6rvyk" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Tod Beardsley</span> (<span class="italic">npub1qzu…rvyk</span>)</a></span> on:<br/><br/>✔️ Continuous discovery<br/> ✔️ Overlooked external pathways<br/> ✔️ Why periodic inventories fail<br/> ✔️ How to operationalize ASM<br/><br/>👉 Watch the replay and learn how to see what others miss: <a href="https://www.runzero.com/resources/asm-continuous-discovery/">https://www.runzero.com/resources/asm-continuous-discovery/</a><br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/690/104/921/878/674/original/8ca3f7ec7247028a.mp4"></video><br/> 2025-12-09T14:35:10Z https://yabu.me/nevent1qqsqkkzhen395l6wn46z7rs2kyjplteq69cyvs8jse9lref72p3y6gqzyz2qf7r7975gt5vldpl27v9tysxm6xg3t54nzvd89t3j2qnfs8epsewq54g SSH remains one of the weirdest and widest attack surfaces online.<br/><br/>At DEF CON, <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub18pcs78pe5c63534qwvzf5c0gateeu9qk3g4grgj5n9gxn8wth8vsek787r" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>HD Moore</span> (<span class="italic">npub18pc…787r</span>)</a></span> shared findings from internet-wide scans with SHamble, showing where SSH is exposed, how tiny quirks became auth bypass &amp; blind RCE, and how new SHamble + Nuclei features help defenders spot risky keys and configs.<br/><br/>🔗 Watch: <a href="https://www.runzero.com/resources/def-con-33-shaking-out-shells/">https://www.runzero.com/resources/def-con-33-shaking-out-shells/</a><br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/684/538/339/460/886/original/ae6b205060f8525c.mp4"></video><br/> 2025-12-08T14:59:29Z https://yabu.me/nevent1qqsqq8zjdghuk5h4sffd4mapaz7arqwjr89rswmfwmqgpf4n99k8urgzyz2qf7r7975gt5vldpl27v9tysxm6xg3t54nzvd89t3j2qnfs8epsyh59sg ‼️ New vulnerabilities have been disclosed in the Veeam Service Provider Console. <br/><br/>CVE-2024-42448 is critical, potentially allowing remote code execution. CVE-2024-42449 is rated high, potentially leaking the NTLM hash of a service account &amp; allowing file deletion. <br/><br/>Learn more and see how to find potentially impacted systems: <br/><br/><a href="https://www.runzero.com/blog/veeam-instances/">https://www.runzero.com/blog/veeam-instances/</a> 2024-12-04T17:49:26Z https://yabu.me/nevent1qqs8jlss9qxwtglchvmzwyuvn9rl5nlyt3zcyy0mec5evw9aadxgupczyz2qf7r7975gt5vldpl27v9tysxm6xg3t54nzvd89t3j2qnfs8epsyavjjp ❗ Fortinet has issued an advisory for FortiManager confirming CVE-2024-47575 is being actively exploited in the wild. This extremely critical vulnerability has a CVSS score of 9.8.<br/><br/>⚠️ This vulnerability can enable RCE upon connecting to a FortiManager instance with a valid Fortinet device certificate and could lead to total compromise of the vulnerable system.<br/><br/>⏱️ Shoutout to <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1mzgdzx4fqpwgsrdl3qkksaghs4awqcnjyw3j4rh7ggta8xmftepqu0l2g4" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>rk: it’s hyphen-minus actually</span> (<span class="italic">npub1mzg…l2g4</span>)</a></span> for the quick work on this Rapid Response!<br/><br/>👉 Launch runZero now to pinpoint assets that could be affected -- no rescanning or credentials required:<br/><br/><a href="https://www.runzero.com/blog/how-to-find-fortimanager-instances-on-your-network/">https://www.runzero.com/blog/how-to-find-fortimanager-instances-on-your-network/</a> 2024-10-23T19:06:07Z