Remove are-you-ready-for-the-next-log4shell-tenables-cso-and-cio-offer-their-advice
article thumbnail

Cybersecurity Snapshot: Log4j Anniversary, CI/CD Risks, Infostealers, Email Attacks, OT Security

Tenable

It was at around this time last year that the discovery of the zero-day Log4Shell vulnerability in the ubiquitous Log4j open source component sent shockwaves through the worlds of IT and cybersecurity. . One year later, we’ve learned from recently released Tenable telemetry research that Log4j’s Log4Shell remains very much an issue.

article thumbnail

Cybersecurity Snapshot: Get the Latest on Deepfake Threats, Open Source Risks, AI System Security and Ransomware Gangs

Tenable

Check out a new Google paper with tips and best practices. Plus, open source security experts huddled at a conference this week – find out what they talked about. Also, Uncle Sam says it’s time to prep for deepfake attacks. And much more! Dive into six things that are top of mind for the week ending September 15.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Cybersecurity Snapshot: Key 2022 Data for Cloud Security, Vulnerability Management, EASM, Web App Security and More

Tenable

1 – Log4J’s Log4Shell: Emblematic of VM complexities . Little over a year after the Log4j crisis, few data points illustrate the challenges of vulnerability management as well as Tenable’s finding that, as of October, 72% of global organizations remained exposed to Log4Shell, despite its unprecedented severity, pervasiveness and notoriety.

Cloud 98
article thumbnail

Cybersecurity Snapshot: CISOs See Budgets Tighten, as Cyberthreats Intensify

Tenable

Plus, a survey offers an inside look at how organizations are grappling with cyber challenges. Source: “ 2023 Security Budget Benchmark Report ” from IANS Research and Artico Search, September 2023) To get more details, check out the report’s announcement and a blog about the report , and download the full report. In addition, the U.S.

Budget 79
article thumbnail

Cybersecurity Snapshot: Phishing Scams, Salary Trends, Metaverse Risks, Log4J Poll

Tenable

Get the latest on worrisome phishing stats; businesses’ embrace of the metaverse, come what may; a (small) improvement in CISO job stability; the compensation cost of security leaders; and more! Dive into six things that are top of mind for the week ending Dec. 1 - CISA: Employees fall for phishing scams at an alarming rate.

article thumbnail

Cybersecurity Snapshot: The Latest on Supply Chain Security – SBOM Distribution, Open Source Flaws and a New Security Framework

Tenable

Plus, why you should tread carefully with open source components. Also, the SLSA supply chain security framework is ready. It describes three levels of sophistication for each – low, medium and high – and offers examples of SBOM-sharing solutions. Check out what CISA says about the sharing of software bills of materials.