HD Moore

At DISC 2026? events.dragos.com/disc2026 - Reach out if you'd like to chat about Dragos research and runZero product things! Great talks and an amazing community of defenders. I'd post photos/highlights, except its not that kind of conference, and you have to be here to see them.

Trying to scan for the sshhole.com authentication bypass? SSHamble v0.5.0 has you covered, with a helpful PR from Paul Asadoorian (@securityweekly)! Code at github.com/runZeroInc/ssh… (with a bonus CoreOS check and Dockerfiles to validate both issues end-to-end)

Good news! We've wrapped our initial "Lights Out" research into out-of-band management devices and BMCs. The final advisories are live and OOBscan now includes detections for all issues. The bad news: many of these issues still have no patch:

github.com/runZeroInc/oob…

Code-execution flaw in UEFI firmware affects most servers on planet Earth: arstechnica.com/security/2026/…

Great work by Alex Matrosov (Anthropic) and Dan Holmes-Mitra (Google)!

Python's certifi package provides the trusted root CAs for a huge portion of the Python ecosystem. It's also a great example of how complex dependencies can get. Ultimately, these certs are sourced from Mozilla, but they go through 5 hops to get there:

gist.github.com/hdm/2e5ebbffa5…