See what we're thinking about, working on, & blogging about.

Explore the latest insights, ideas, & opinions from our talented team of experts & researchers.

CVE-2024-38508, an N-day story runZero Research

Technical analysis of CVE-2024-38508: an N-day root privilege escalation flaw in Lenovo XCC2 firmware discovered during runZero BMC 'Lights Out' project.

Subscribe Now

Get our latest Rapid Responses, insights, and blogs delivered directly to your inbox.

Welcome to the club! Your subscription to our newsletter is successful.

Rapid Response
How to find Cisco Identity Services Engine (ISE) appliances on your network
September 17, 2026
Multiple vulnerabilities have been disclosed in certain versions of Cisco Identity Services Engine (ISE) & Cisco ISE Passive Identity Connector...
Rapid Response
How to find Cisco Secure Email Gateway services on your network
September 14, 2026
Cisco has reported a vulnerability in their Secure Email Gateway product, allowing remote, unauthenticated attackers to execute arbitrary code.
Rapid Response
How to find GitLab instances
September 11, 2026
GitLab disclosed a vulnerability affecting self-managed installations of GitLab CE and EE. Here's how to find potentially vulnerable systems.
Rapid Response
How to find N-able N-central installations on your network
September 9, 2026
N-able has disclosed two vulnerabilities in certain versions of N-central. Here's how to find affected assets.
Rapid Response
How to find MikroTik RouterOS systems on your network
September 7, 2026
MikroTik disclosed multiple vulnerabilities affecting certain versions of the RouterOS. Here's how to find affected systems with runZero.
Rapid Response
How to find SonicWall devices on your network
September 3, 2026
SonicWall disclosed versions of the SMA1000 series appliances are susceptible to both SSRF & RCE vulnerabilities. Here's how to find impacted devices.
Rapid Response
How to find Plex Media Server installations on your network
September 2, 2026
Plex has issued a security update addressing multiple undisclosed vulnerabilities across Plex Media Server & Plex Desktop. Find impacted assets...
runZero Perspective
Thinking critically about Critical Infrastructure
September 1, 2026
Critical infrastructure cyber attacks are rising. Learn why OT systems are so vulnerable and how runZero helps identify hidden PLC and edge device...
Rapid Response
How to find PaperCut Software instances on your network
August 31, 2026
Certain versions of PaperCut NG and PaperCut MF are affected by two vulnerabilities. Here's how to find impacted assets with runZero.
runZero Perspective
Simmering in the hot alphabet soup of vuln management
August 27, 2026
Between CVEs, CPEs, and CISA's Vulnrichment, vulnerability management is an alphabet soup. NIST wants your expert input on using AI to fix NVD...
Rapid Response
How to find Ubiquiti UniFi OS assets on your network
August 26, 2026
Ubiquiti disclosed multiple vulnerabilities affecting certain versions of the UniFi OS. Here's how to find affected assets with runZero.
Rapid Response
How to find Ubiquiti UniFi Protect assets on your network
August 26, 2026
Ubiquiti disclosed multiple vulnerabilities affecting certain versions of the UniFi Protect Application. Here's how to find affected assets.