HD Moore

New AirSnitch attack breaks Wi-Fi encryption in homes, offices, and enterprises That guest network you set up for your neighbors may not be as secure as you think.

New AirSnitch attack breaks Wi-Fi encryption in homes, offices, and enterprises: arstechnica.com/security/202...

AirSnitch resets WiFi security back to the bad-old-days of ARP spoofing and trivial MITM.

ATX Golang Meetup - February 2026, Wed, Feb 11, 2026, 6:30 PM | Meetup Join us for an evening of information, networking, friendship, beer, and pizza! You are invited to come discuss our favorite programming language and meet other Go develope

Hello Austin Go hackers! Tonight (2026-02-11) is our next ATX Golang meetup, located in Station Austin (aka Capital Factory ). We will have pizza, drinks, and various short talks and discussions related to the Go ecosystem: www.meetup.com/atxgolang/ev...

Run Internet speed tests from runZero Explorers Get an early signal into usability before you scan. Measure internet connectivity via runZero Explorers to remove uncertainty, with audit logs included.

runZero users get a new feature today (including Community Edition) - recurring internet speed tests for all deployed Explorers! This (very optional) capability lets you identify backhaul/connectivity issues for sites that you can't physically get to: www.runzero.com/blog/interne...

ATX Golang Meetup - January 2026, Wed, Jan 14, 2026, 6:30 PM | Meetup Join us for an evening of information, networking, friendship, beer, and pizza! You are invited to come discuss our favorite programming language and meet other Go develope

It's time for our first ATX Gopher meetup of the year! If you are in Austin and write Go code (or would like to start), please join us at 6:30pm at Station Austin (co-located with Capital Factory). Charles and I will be providing pizza and drinks as usual:

www.meetup.com/atxgolang/ev...

Synology Reverses Policy Banning Third-Party HDDs After NAS sales plummet Synology has backtracked on one of its most unpopular decisions in years. After seeing NAS sales plummet in 2025, the company has decided to lift restrictions that forced users to buy its own Synology...

they blinked: www.guru3d.com/story/synolo...

🎧 We collected some of our favorite podcasts of 2025 featuring @hdm.io for you to enjoy.

📺 So go ahead and get yourself some coffee (or hot cocoa!) & watch here: www.runzero.com/blog/fun-pod...

Exposure is everywhere now — cloud, SaaS, IoT, shadow IT, unmanaged vendors.

Replay the SC Media webcast with @sawaba.bsky.social, @hdm.io & @todb.hugesuccess.org to learn why continuous discovery matters & how attackers exploit what you can’t see.

👉 www.runzero.com/resources/as...

heya! great community as always; easiest way to get in touch is the #atx channel on the gopher slack

🎙️ The Hacker's Cache: Kyser Clark talks with Metasploit creator @hdm.io on why CVEs won’t save you in 2025.

They get into non-CVE vulns, hidden SSH risks, attacker innovation, AI’s impact, and why exposing version numbers can improve security.

👉 www.runzero.com/resources/wh...

On the latest Risky Biz, @patrick.risky.biz, and @hdm.io talk about visualizing the attack surface with runZeroHound, why you can't synthesize what runZero delivers, & how we are leveraging AI to help predict risks and scan smarter.

📺 Watch the full interview: www.runzero.com/resources/ri...

📺 Live webcast Dec 3 with SC Media!

Your attack surface doesn’t end at the firewall.

Join @hdm.io, @todb.hugesuccess.org, and @sawaba.bsky.social to learn how continuous discovery + attack path mapping keeps you ahead.

👉 www.scworld.com/cybercast/at...

🧭 Cybersecurity’s old rules are cracking.

In his SecTor keynote, @hdm.io breaks down the rules that shaped the 2000s: what survived, what failed us, and the new rules we’ll need next.

Missed it? 👀 Watch the keynote:
www.runzero.com/resources/on...

SO-CON 2026 - SpecterOps SO-CON 2026: Secure your spot for the conference and training.

The CFP for SO-CON 2026 closes in about 12 hours (11:59 2025-11-15)! Have a cool approach to attack path management (or awesome connector for BloodHound OpenGraph)? Submit ASAP:

specterops.io/so-con/

Be KVM, Do Fraud Hi Everyone! It’s me, your friendly Wav3.

The clever folks at Grumpy Goose Labs have published even more ways to identify unauthorized IP KVMs across your environment, with some great memes to boot! Be KVM, Do Fraud - blog.grumpygoose.io/be-kvm-do-fr...

Your attack surface is sprawling & full of blind spots.

🎥 On Dec 3 at 2 PM ET, SC Media brings together @hdm.io, @todb.hugesuccess.org, & @sawaba.bsky.social to reveal how to operationalize attack surface management without losing your mind.

👉 Register here: www.scworld.com/cybercast/at...

runZero Hour is one week away!

Join us on Nov 19: @todb.hugesuccess.org, Rob King, @hdm.io, and Jared Atkinson ( CTO @specterops.io ) break down attacker movement, graph analysis, runZeroHound, and this month’s top vulnerabilities.

👉 Register here: www.runzero.com/research/run...

🚨Your secure enclave? More of a suggestion than a guarantee.

If you were expecting TEEs to provide private computing in untrusted data centers, this latest article by @arstechnica.com featuring our Founder & CEO @hdm.io is a must-read:

arstechnica.com/security/202...

Identify insecure TLS services with runZero Certificate Inventory The runZero Certificates Inventory is an essential tool for seeing and securing every certificate in your environment. Explore these essential use cases.

Identify insecure TLS services with the enhanced runZero Certificate Inventory: www.runzero.com/blog/identif...

After VMware: Managing EOL for Proxmox Hypervisors Outdated Proxmox VE installs leave systems exposed as users migrate from VMware. With runZero you can easily identify EoL hosts and expiring TLS certs.

🎃 Happy Halloween! The end of #CybersecurityAwarenessMonth means it's time for our EoL-palooza grand finale!

The scariest find? A surge of End-of-Life Proxmox systems... software zombies attackers feast on.

🧟‍♂️ @hdm.io has the guide to hunt them down: www.runzero.com/blog/managin...

AHA! Austin Hackers Anonymous!

Austin Hackers Anonymous (AHA) is TONIGHT (2025-10-30) takeonme.org - Have some zero-day to share? AHA is an official CNA and will issue CVEs for vulnerabilities disclosed at the meeting. I'm planning to demo more SSHamble.com findings along with BloodHound OpenGraph stuff. See yall soon!

So this story is super duper interesting for a whole ton of reasons, but one big one is its a very rare glimpse into the private valuation of high-end exploits held by major defense contractors

bsky.app/profile/lega...

Uncovering network attack paths with runZeroHound runZeroHound converts runZero asset inventories into BloodHound OpenGraph imports, enabling Cypher-based analysis of real network attack paths.

Just like chocolate and peanut butter, runZero and BloodHound are an amazing combination. Today we are introducing runZeroHound - an open source toolkit for bringing runZero Asset Inventory data into BloodHound attack graphs: www.runzero.com/blog/introdu...

It's the spooky season, so several of my ebooks are on sale. 💀🎃🪦
Aloha from Hell appears to be $2.99 everywhere, and The Secrets of Insects is $6.99.
Dead Set and King Bullet are $1.99 each on Amazon.
US only

Catching Credential Guard Off Guard - SpecterOps Uncovering the protection mechanisms provided by modern Windows security features and identifying new methods for credential dumping.

SpecterOps released "DumpGuard" along with a detailed article on how they were able to bypass Windows Credential Guard in both privileged and unprivileged contexts. I learned a ton about Isolated LSA and friends: specterops.io/blog/2025/10...

Our new website has launched. We will continue to update the site with information as it becomes available.

https://bsidespyongyang.com/

🎙️ Join @hdm.io, @todb.hugesuccess.org & @sawaba.bsky.social for a live SC Media webcast:

“Fixing a Broken System: Why Legacy Vulnerability Management Tools Can’t Keep Up”

Learn what’s next for exposure & attack surface management.

📅 Oct 29
⏰ 2 PM ET
🔗 www.scworld.com/cybercast/fi...

I ♥️ encryption

runZero Hour: Episode 23 Join us for a scary episode of runZero Hour with Rob King, Tod Beardsley, and EOL expert and technology necromancer, captn3m0 (pronounced “nemo”). They will summon and explore runZero’s latest…

Today's runZero Hour is up with Rob King, Tod Beardsley, and EOL expert and technology necromancer, captn3m0 (pronounced “nemo”). They will summon and explore runZero’s latest research paper, “Undead by design: Benchmarking end-of-life operating systems”:

www.youtube.com/watch?v=BXBb...

JawnCon closing session - stats on badges, speakers, bandwidth, and money raised for FU Cancer

JawnCon (jawncon.org) 0x02 just wrapped! I wish I could make it this year, but settled for catching the talks on the live stream:

Main Stage Day 1: www.youtube.com/live/Cvf-mAd...

Man Stage Day 2: www.youtube.com/watch?v=bcr6...

Classroom Day 2: www.youtube.com/watch?v=1aML...

ATX Golang Meetup - September 2025, Wed, Sep 10, 2025, 6:30 PM | Meetup Join us for an evening of information, networking, friendship, beer, and pizza! You are invited to come discuss our favorite programming language and meet other Go develope

Hello Austin Gophers! Join us tonight, Wednesday, October 8th, 2025 for two hours of lightning talks and discussion at the ATX Go meetup. This is hosted by Capital Factory and runs from 6:30 PM to 8:30 PM central (with pizza and drinks!): www.meetup.com/atxgolang/ev...