HD Moore

Skipping Black Hat and DEFCON this year? Consider presenting at BSides Hanoi instead. Now in its second year, the conference takes place on August 5th, 2026, and a few more talk slots are still open - but the submission deadline is today. Apply here: bsideshanoi.net/en/call-for-pa…

runZero 5.0! runzero.com/5/

Submissions are still open! If you've been sitting on a bug, technique, war story, weird research rabbit hole, or beautifully cursed idea: now is the time. Write something worth archiving. Phrack CFP closes June 30. More details on how to submit at phrack.org/news

Back in 2020, @hdmoore casually mentioned he had bootstrapped his new network discovery product (runZero, fka Rumble) to almost $1m ARR...by himself. Ok, maybe that's more easily done today with AI, but come on, this was 2020 pre-AI! If you know HD, this should not be entirely surprising. When Paul Graham wrote about Founder Mode, he was undoubtedly thinking of HD. HD is both a visionary security wizard and an execution machine. It was time for him to actually hire some folks, scale the company, and raise some capital. Of course, I was in 100% and joined the board. Again, if you know HD, this is a no-brainer to be involved in any new venture that he's set his sights on. 6 years later, HD and team have built runZero into a leader in the IT/OT/IoT/cloud exposure management space. In a post-Mythos world, the ability to understand your assets and their exposure has never been greater. Accenture understands this well, and is pulling together Dragos, runZero, NetRise, and Phosphorus to create a new security company under the Dragos banner. Congrats to all the teams, founders, and investors involved! @hdmoore and the @runZeroInc crew. @RobertMLee and team at @DragosInc. @TommyPastry at @NetRiseInc. Chris Rouland at @phosphorusinc. wsj.com/pro/cybersecur…

We are excited to announce that Accenture has signed a definitive agreement to acquire runZero as part of a $4.2 billion M&A transaction that brings together leaders in OT and IT security including Dragos and NetRise 🔥 runZero started as a small research project in @hdmoore's basement and grew rapidly as one of the best ways to discover hardware and software on your network It is now an essential tool and is the best way to understand your attack surface in a post-Mythos world Like many cybersecurity founders, I have been inspired by the impact HD has had on our industry over many years His work @metasploit and @runZeroInc are a reminder that we can’t protect what we can’t see, and what hides in the dark will come out in the light with frontier LLMs It is nice to be able to recognize all of his contributions to the field in a meaningful way today. Congrats HD and the team!

My favorite bugs are where the vendor doesn't consider it a vulnerability: How a USB-connected speaker can infect a PC without ever being touched: arstechnica.com/security/2026/…

ATX Go is TONIGHT (a week early this month): Hey gophers! Join us Wednesday (May 6th, today), 6:30–8:30pm at Station Austin (ie. Capital Factory) 16th floor, in "Antones" for our monthly meetup. You know the drill: 🍕 pizza, 🍻 beer, and talks! meetup.com/atxgolang/even…

ATX Go is a week early this month, tomorrow night! Hey gophers! Join us Wednesday, 6:30–8:30pm at Station Austin (ie. Capital Factory) 16th floor, in "Antones" for our monthly meetup. You know the drill: 🍕 pizza, 🍻 beer, and a few short talks on Go. meetup.com/atxgolang/even…

Secure systems can still create insecure paths. @hdmoore shows how relationships between systems create hidden exposures, and how to uncover them at scale with BloodHound OpenGraph and Cypher. #SOCON2026

“Palo Alto firewalls may have dominated attacker attention for a time, but 2025 showed how quickly the spotlight shifts when a new access vector proves just as effective. Firewalls are still foundational boundary controls, but attackers like them too.” - @hdmoore at #SOCON2026

🔈 New podcast alert! @HDMoore discusses runZero's upcoming 4.9 release on @riskydotbiz with @caseyjohnellis. Hear how we're tackling converged IT/OT network challenges! 🎧 Listen to the full interview to learn more: runzero.com/resources/risk… #OTsecurity

...In which @hdmoore and I go "full packet-rat" and dig into what @runzero have been developing to support the complicated , fragile, often safety-critical OT and ICS world. If you've ever knocked over a dusty Solaris box with an nmap scan before (and want to understand how to find it without doing that), this one is for you. Sponsored: RunZero accidentally got good at OT - Risky Business Media m.cje.io/4ubHXby

🎥 In a recent CyberRisk TV interview, our CEO HD Moore explains why traditional #OT network segmentation falls short and discusses soon-to-be released runZero capabilities for converged IT/OT environments. 👉 Watch the full interview now! runzero.com/resources/ot-s…

🚨 New runZero 4.9: We got you, defenders! 📈 Attack path mapping 👁️ Multi-homed detection 🗺️ 2D/3D topology maps 🧠 Deep OT intel + field-level discovery ✅ Protocol exposures 🔥 Risk prioritization 💻 UI/UX updates 👉️ Release info: runzero.com/blog/runzero-4… #OTsecurity

The cat's out of the bag! My latest book, "The Secret Life of Circuits", is available in early access: lcamtuf.coredump.cx/blog/secret/ It's what I wish I had when I was starting out. Electrons to embedded systems, 290+ color illustrations and 420+ pages of well-explained theory.

Need to boost your exposure management game? Don’t miss our CEO @HDMoore’s #SOCON2026 talk TODAY at 4:15 PM ET, Relatively Risky: Identifying Exposures at Scale with BloodHound OpenGraph. Learn how to uncover unusual attack paths & hidden exposures. specterops.io/so-con/

Hey want to see GPT-5.4 writing a browser exploit to pop xcalc on Netscape Navigator 5.0 running on RedHat Linux 5.2 i386

@lcamtuf It was a sad day when we had to roll out identity verification before people could download the Metasploit Framework... 🤣

I still remember when I had to put out a press release saying that afl-fuzz was too dangerous to make available to the general public