runZero Insights


runZero Insights
NSA Proposes Common-Sense Fixes to OT Security Standards
June 17, 2025
NSA has recommended six common-sense security controls for OT/ICS smart controllers in NSS. Learn what they are, why they matter and how runZero...
runZero Insights
The Role of Total Attack Surface Visibility in M&A
June 3, 2025
With M&A, security teams must rapidly uncover risks. See why legacy tools fall short and how runZero ensures a secure transition.

Subscribe Now

Get the latest news and expert insights delivered in your inbox.

Welcome to the club! Your subscription to our newsletter is successful.

runZero Insights
Not Just the Score: Why EPSS Volatility Might Be the Signal You’re Missing
May 27, 2025
We fixate on the number, but the change — the volatility — often reveals more than the number itself. That's where the real signal may lie.
runZero Insights
Ports Behaving Badly: Uncovering Risky Protocols in Unexpected Places
May 12, 2025
We’re shining a light on the strange, surprising, and straight-up dangerous services hiding across your environment — and how you can use runZero...
runZero Insights
One Asset, Many Risks: Prioritizing the Stack Instead of the CVEs
April 29, 2025
runZero surfaces stacked, asset-level risks—like misconfigurations, EOL software, and weak segmentation—that traditional vulnerability scanners...
runZero Insights
Only Four Shopping Days Left Until RSAC!
April 24, 2025
In which Tod assures his fellow nerds that RSA Conference isn’t just for marketing hypesters.
runZero Insights
Ditch Vulnerability Scanners: A Smarter Approach to Exposure Management with runZero Alongside Endpoint Agents
April 22, 2025
Ditch your vulnerability scanners. Leverage your endpoint agents for authenticated discovery. Use runZero for everything else. It's exposure...
runZero Insights
CVE Marches On
April 16, 2025
On April 15, 2025, the CVE program faced sudden shutdown fears — but CISA stepped in with last-minute funding. Crisis averted, for now.
runZero Insights
VulnCon 2025 Wrapup
April 14, 2025
Last week, I got to see friends, enjoy Carolina barbecue, and hang out with super smart, fun people. VulnCon has turned out to be one of the most...
runZero Insights
Sound & Fury: Revisiting Apache Tomcat & next.js
April 4, 2025
A reflection on recent high-profile vulnerabilities in next.js and Apache Tomcat just before VulnCon 2025, and why even with high scores and PoCs,...
runZero Insights
Accelerate Asset Visibility with runZero's Custom Integrations
March 20, 2025
Boost asset management with runZero’s custom integrations framework—designed for fast, easy deployment to meet your unique tech stack needs.
runZero Insights
Stormy with a chance of runZero
March 4, 2025
runZero and GreyNoise, together at last on Storm Watch