Tenable

MARCH 20, 2024

Explore how Tenable One for OT/IoT helps organizations stay ahead in today's evolving threat landscape with end-to-end visibility and cyber risk prioritization across IT, OT and IoT. Similarly, a workstation on the production plant can do more damage than a personal laptop in a guest network.

IoT 73

IoT How To Network Tools 73

TechCrunch

APRIL 4, 2023

In a sign that investors believe in the vision (or at least the business proposition), Strivacity today closed a $20 million Series A-2 round led by SignalFire with participation from Ten Eleven Ventures, Mandiant founder Kevin Mandia, and Tenable co-founder Jack Huffard. That’s creating opportunities for us,” he added.

Company 246

Company Authentication Survey Machine Learning 246

Tenable

OCTOBER 17, 2023

On-prem web app scanning is now available within Tenable Security Center, offering comprehensive exposure management with accurate analysis, OWASP Top 10 coverage and easy setup. The rise in supply chain attacks has added another layer of complexity, as web applications increasingly rely on third-party components.

Security 73

Security Applications Analysis Open Source 73

Tenable

AUGUST 30, 2023

Here’s how Tenable Nessus can help. When Tenable Nessus was launched in 1998, the attack surface consisted of only traditional IT devices — desktops, workstations, network equipment, etc. What’s needed is Tenable Nessus Expert. A solution whose assessment capabilities evolve as the modern attack surface evolves.

Applications 98

Applications Study Open Source Report 98

Tenable

JUNE 12, 2023

CVE-2023-27997: Heap-Based Buffer Overflow in Fortinet FortiOS and FortiProxy SSL-VPN (XORtigate) Fortinet says a critical flaw in its SSL-VPN product may have been exploited in the wild in a limited number of cases. Identifying affected systems A list of Tenable plugins to identify this vulnerability can be found here. 6.4.10, 6.4.12

Firewall 103

Firewall Authentication Research Groups 103

Tenable

AUGUST 2, 2023

Attributes can be defined per service or even ad-hoc, so the attribute data retrieved does require some analysis. Image Source: Screenshot taken by Tenable of an IBM web interface discovered during an example scan, July 2023 Image Source: Tenable, July 2023 Some of these exposed services may also indicate an internal and external IP address.

Internet 97

Internet Storage Software Review Systems Review 97

Tenable

DECEMBER 10, 2023

Here’s how Tenable OT Security can help. In this blog, we use examples from our lab environment to demonstrate how Tenable OT Security can help you tackle these hurdles while both passively monitoring and actively querying your assets for in-depth asset visibility. The PLC is a 1768-L43S/B i.e

How To 100

How To Systems Review Technical Review Network 100

Tenable

APRIL 12, 2024

Tenable CEO and Chairman Amit Yoran said in a statement that it’s not surprising to learn that Midnight Blizzard’s intrusion campaign escalated after its initial discovery. government might,” he added. All impacted federal agencies have been notified. CISA is treating this threat with the intense scrutiny it deserves.

Generative AI 118

Generative AI Malware Trends Government 118

Tenable

OCTOBER 10, 2023

We omitted CVE-2023-44487 from our counts as this vulnerability was reported to MITRE and not Microsoft and does not exclusively affect Microsoft products. In order for a system to be vulnerable to these vulnerabilities, the MSMQ service must be added and enabled. Details about this flaw are included in our analysis below.

Windows 117

Windows Software Review Azure Systems Review 117

Tenable

JULY 25, 2023

Tenable was provided access to the support article and our blog post reflects what we currently know about this vulnerability. A list of Tenable plugins to identify this vulnerability will appear here as they’re released. Learn more about Tenable One , the Exposure Management Platform for the modern attack surface.

Mobile 98

Mobile Knowledge Base Authentication Government 98

Tenable

MARCH 29, 2024

Despite widespread knowledge and documentation of SQLi vulnerabilities over the past two decades, along with the availability of effective mitigations, software manufacturers continue to develop products with this defect,” CISA and the FBI said in a statement. One of the bugs was exploited in the wild by the CL0P ransomware gang.

Systems Review 67

Systems Review Weak Development Team Banking System 67

Tenable

JANUARY 23, 2024

we @IslamRalsaid1 got some zero-days vulnerabilities in "goanywhere" product, patch your instance ASAP #0day #bugbounty pic.twitter.com/pazqDpYKmZ — mohammed eldeeb (@malcolmx0x) December 5, 2023 Analysis CVE-2024-0204 is an authentication bypass vulnerability in Fortra’s GoAnywhere MFT software.

Authentication 64

Authentication Research Groups Analysis 64

Tenable

DECEMBER 2, 2022

Get the latest on Log4Shell’s global remediation status; the need for metaverse security rules; a shutdown of “pig butchering” domains; tips for secure IoT products; an informal poll about AD security; and more! . 1 - Tenable: 72% of organizations still vulnerable to Log4Shell. Check out the results below.

IoT 52

IoT Guidelines Systems Review Technical Review 52

Tenable

DECEMBER 22, 2023

Tenable, whose products have had AI technology for years, was very much at the center of this trend, as it integrated GenAI capabilities across the Tenable One Exposure Management Platform in 2023. “AI That was a key insight from Tenable Research’s “ 2022 Threat Landscape Report (TLR),” released in February.

Artificial Inteligence 78

Artificial Inteligence Technical Review Cloud Artificial Intelligence 78

Tenable

AUGUST 1, 2023

Tenable OT Security 3.16 At Tenable, we understand the critical importance of securing these complex systems, which is why we are thrilled to announce the launch of Tenable OT Security 3.16. What’s inside Tenable OT Security 3.16 BMS security for smart buildings Tenable OT Security 3.16 Tenable OT Security 3.16

System 52

System Network IoT Video 52

Tenable

AUGUST 5, 2021

Pulse Secure has patched CVE-2021-22937, a patch bypass for CVE-2020-8260, in its Connect Secure products. Pulse Secure added validation to ensure archives only contain “expected files” to address CVE-2020-8260, but this validation does not apply to all archives, leaving an opening for attackers. Background. Get more information.

Software Review 121

Software Review Technical Review Authentication Systems Review 121

Tenable

DECEMBER 21, 2022

NEGOEX is an extended negotiation mechanism for SPNEGO (SPNEGO NEGOEX) intended to enhance SPNEGO by addressing some of the drawbacks of SPNEGO while adding new GSSAPI extensions. Does Tenable have product coverage for CVE-2022-37958? Additional product coverage for CVE-29022-37958 will appear here as it’s released.

Windows 98

Windows SMB Authentication Research 98

Tenable

APRIL 19, 2024

To get more details, check out: The Protobom announcement “ CISA, DHS S&T and OpenSSF Announce Global Launch of Software Supply Chain Open Source Project ” The Protobom home page and Github page For more information on SBOMs: “ CISA, NSA push SBOM adoption to beef up supply chain security ” (Tenable) “ What is a software bill of materials (SBOM)?

Artificial Inteligence 65

Artificial Inteligence Trends Technical Advisors Analysis 65

Tenable

APRIL 22, 2021

At Tenable, we’ve made several key investments in our Tenable Assure partner program to help distributors, resellers and managed security service providers (MSSP) better support end-user organizations with the tools they need to understand and reduce cyber risk. This year, Tenable is going all-in on our channel efforts.

Games 98

Games IoT Programming Conference 98

Tenable

DECEMBER 22, 2022

Source: Tenable Research, December 2022. Source: Tenable Research, December 2022. Rather than grouping sets of vulnerabilities according to affected products, the Update Guides are provided for each vulnerability individually. Source: Tenable Research, December 2022. Tenable’s Patch Tuesday workflow.

Weak Development Team 98

Weak Development Team Metrics Research Systems Review 98

Tenable

JULY 12, 2022

When Tenable co-founder and former CTO Renaud Deraison dropped out of college to pursue his idea of creating a tool to find software vulnerabilities, no one could have imagined the impact Nessus would have on the cybersecurity industry. Introducing the newest member to the Nessus line-up, Nessus Expert.

Fractional CTO 99

Fractional CTO Policies Internet Infrastructure 99

Tenable

AUGUST 4, 2020

A partnership between Tenable and JSOF continues to uncover additional devices vulnerable to Ripple20. More Vulnerable Devices Identified by Tenable. When the Ripple20 advisory was published, Tenable Research contacted JSOF to collaborate on the discovery of affected devices. Background. Affected Vendors.

Software Review 106

Software Review Systems Review Research Internet 106

Tenable

OCTOBER 6, 2023

In addition, CISA’s Cybersecurity Awareness Month campaign challenges tech vendors to build safer products. For more information about ICS/OT security, check out these Tenable blogs and videos: “ Three U.S. This being said, the number of recorded victims in August were still significantly higher than this time last year,” Hull added.

Budget 67

Budget Report Survey Open Source 67

Tenable

FEBRUARY 9, 2024

Speaking to the Associated Press, Tenable Chairman and CEO Amit Yoran called Wray’s warning “an urgent call to action.” “Continuing to turn a blind eye to the risk sitting inside our critical infrastructure is the definition of negligence,” Yoran added.

Weak Development Team 68

Weak Development Team Infrastructure Generative AI Artificial Inteligence 68

Tenable

AUGUST 25, 2023

3 – CISA to AI vendors: Put security at the heart of your software Artificial intelligence tools are, at their core, software products, and as such their developers must build them secure by design. To get all the details, read the joint alert , announcement and factsheet , and visit CISA’s “ Post-Quantum Cryptography Initiative ” homepage.

Malware 98

Malware Artificial Inteligence Open Source Artificial Intelligence 98

Tenable

OCTOBER 15, 2020

The researchers added that they were able to “divert execution flow through stack corruption” which means achieving RCE is “likely feasible.” Our own Shodan search for vulnerable SonicWall devices led us to two specific search queries: product:"SonicWALL firewall http config". product:"SonicWALL SSL-VPN http proxy".

Authentication 121

Authentication Research Firewall Network 121

Tenable

FEBRUARY 16, 2023

By the end of the week, they had identified a common theme among customers that were using both Tenable and Microsoft products in their environments., When Tenable vulnerability scans were run on Windows machines joined to Azure Active Directory (AAD), the machines were being negatively impacted.

Industry 52

Industry Azure Engineering Windows 52

Tenable

JANUARY 5, 2023

CVE-2022-47523: ManageEngine Password Manager Pro, PAM360 and Access Manager Plus SQL Injection Vulnerability Zoho patches a newly disclosed high-severity SQL injection flaw in several ManageEngine products; attackers have historically targeted several ManageEngine products over the last three years. Affected Products.

Software Review 52

Software Review Systems Review Analysis Trends 52

Tenable

JUNE 8, 2020

The original proof of concept (PoC) created by Çadirci has been added to his GitHub repository. As a result, we anticipate newly affected devices will be reported and patches will be released over time for devices still receiving product support. Join Tenable's Security Response Team on the Tenable Community. Description.

LAN 111

LAN Media IoT Systems Review 111

Tenable

JUNE 30, 2022

ai published a blog post about a recently disclosed vulnerability in Zoho ManageEngine ADAudit Plus , a compliance tool that monitors Active Directory (AD). Please note: Tenable’s Vulnerability Priority Rating (VPR) scores are calculated nightly. A list of Tenable plugins covering CVE-2022-28219 can be found here. CVSSv3 Score.

Compliance 53

Compliance Research Analysis Infrastructure 53

Tenable

OCTOBER 4, 2023

Fake MrBeast YouTube Ads On YouTube, scammers have used MrBeast’s photos as part of YouTube ads. Unlike the Elon Musk cryptocurrency giveaway scam ads I’ve written about before, the scammers in this instance use in-feed video ads , which appear via YouTube search results and the YouTube app Home feed.

Video 68

Video Survey Advertising Media 68

Tenable

JUNE 8, 2022

Note : We refer in this blog post to “ ahead of NVD” as the various actions that Tenable took before details for a given vulnerability were made available by NVD. Specifically: Ahead of NVD coverage - Tenable released a plugin for the first time before NVD published any details for the CVE. Exploitation and how Tenable helps.

Linux 52

Linux Software Review Authentication Comparison 52

Tenable

APRIL 1, 2020

At the same time, you should begin working with product engineering to reduce access to infrastructure-as-a-service providers. At Tenable, we set up privileged access management for products like Tenable.io At Tenable, most of my colleagues don’t need virtual private network (VPN) access. We’re here for you.

Organization 111

Organization How To Business Continuity Network 111

Tenable

MAY 25, 2023

Exploitation of internet-facing assets, such as Fortinet Fortiguard devices, ManageEngine ADSelfService Plus and FatPipe’s WARP, IPVPN and MPVPN products. Yes, the joint CSA highlights two vulnerabilities in ManageEngine and FatPipe products that have been linked to Volt Typhoon. Does Volt Typhoon exploit any known vulnerabilities?

Malware 52

Malware Windows Groups Internet 52

David Heinemeier Hansson

JANUARY 22, 2024

It neatly separates productivity from effectiveness, and places a premium on the latter. That’s not tenable. And you should be wary of adding more lest you end up with too much.) Juniors are judged on effort, seniors are judged on outcomes. That’s a common and useful heuristic for evaluating employees. But not easy.

Organization 57

Organization 57

Tenable

OCTOBER 29, 2021

Vulnerabilities in VPN products have been the focus of many attacks from diverse threat actors. A “minimum viable product,” rather than a “most valuable player.”. This is the case when vulnerabilities have the potential to compromise Active Directory (AD). Join Tenable's Security Response Team on the Tenable Community.

SMB 98

SMB Software Review Minimum Viable Product Systems Review 98

TechCrunch

JUNE 23, 2021

Silicon Valley-based Accel has a history of backing profitable, bootstrapped companies, having also led large Series A rounds for the likes of 1Password, Atlassian, Qualtrics, Webflow, Tenable and Galileo (which went on to be acquired by SoFi). . We want to become a global brand, raise money and gain market share,” he added.

Fintech 235

Fintech Banking Insurance Retail 235