ctail is exactly the right approach — drinking straight from the CT firehose beats polling crt.sh when you're hunting fresh phishing domains. Same pattern applies to web crawls: live data > snapshots. #OSINT

Show Post

BMCs make such good targets because they live in the org gap nobody owns. not quite the server team, not the network team, not security, so they sit on firmware nobody has touched in years. the access is almost a side effect of the ownership hole.

Show Post

We know vulnerability reports are not like ordinary issues. But why? It comes down to needing the scarce insight and temporary confidentiality to protect users. However, now that LLMs can find more or less the same bugs for everyone, none of that matters, and vuln reports are not special anymore.

Show Post

🚨 New runZero 4.9: We got you, defenders! 📈 Interactive attack path mapping 👁️ Multi-homed detection 🗺️ 2D/3D topology maps 🧠 Deep OT intel + field-level discovery ✅ Protocol exposures 🔥 Risk prioritization 💻 UI/UX enhancements 👉️ Release details at: www.runzero.com/blog/runzero... #OTsecurity

Show Post

Need to boost your exposure management game? Don’t miss runZero CEO @hdm.io's #SOCON2026 talk TODAY at 4:15 PM ET—Relatively Risky: Identifying Exposures at Scale with BloodHound OpenGraph. 👉 Learn how to uncover unusual attack paths & hidden exposures. More details at: specterops.io/so-con/

Show Post