Tenable

JULY 12, 2023

Analysis CVE-2023-3595 is a remote code execution (RCE) vulnerability in Rockwell Automation Allen-Bradley ControlLogix Communication Modules for its 1756 EN2* and 1756 EN3* product families. However, for greater visibility regarding the impact to your networks, we strongly encourage customers to utilize our Tenable OT Security plugins.

Knowledge Base 98

Knowledge Base Network Transportation Industry 98

Tenable

MARCH 29, 2024

s cyber agency is warning operational technology (OT) teams to prioritize cybersecurity. The current state of play in OT can make the path to securely implementing a cloud migration challenging,” the NCSC said in a blog titled “ SCADA 'in the cloud': new guidance for OT organisations. This week, the U.K.

Systems Review 67

Systems Review Weak Development Team Banking System 67

Tenable

DECEMBER 27, 2023

This week's edition of Tenable Cyber Watch unpacks 2024 predictions for cloud security and operational technology. Also covered: the Tenable's Research team's cybersecurity predictions for 2024. Will cloud architects be more responsible for the security of their apps in 2024?

Insurance 53

Insurance Cloud Video Strategy 53

Tenable

AUGUST 1, 2023

Tenable OT Security 3.16 introduces advanced security for building automation systems, a streamlined interface and simplified upgrade process, empowering users to be at the forefront of securing their IT, OT, BMS and IoT assets with confidence. What’s inside Tenable OT Security 3.16

System 52

System Network IoT Video 52

Tenable

DECEMBER 22, 2023

Learn how the cyber world changed in areas including artificial intelligence, CNAPP, IAM security, government oversight and OT security. Tenable, whose products have had AI technology for years, was very much at the center of this trend, as it integrated GenAI capabilities across the Tenable One Exposure Management Platform in 2023. “AI

Artificial Inteligence 78

Artificial Inteligence Technical Review Cloud Artificial Intelligence 78

Tenable

FEBRUARY 9, 2024

The agencies believe that Volt Typhoon hackers, using stealthy “living off the land” techniques, are “pre-positioning” themselves in IT networks in order to move laterally to OT systems, and sow chaos if and when geopolitical or military conflicts erupt with the People's Republic of China (PRC). Critical Infrastructure. ”

Weak Development Team 68

Weak Development Team Infrastructure Generative AI Artificial Inteligence 68

Tenable

SEPTEMBER 8, 2023

Meanwhile, there’s a new, free attack-emulation tool for OT security teams. 2 - OT security teams get new adversary-emulation tool Are you tasked with securing your organization’s operational technology (OT) systems? Caldera for OT consists of a set of plugins that offer support for common industrial protocols.

Technical Review 70

Technical Review Systems Review Software Review Survey 70

Tenable

OCTOBER 6, 2023

A SANS Institute survey found that budgets for ICS/OT security have shrunk, and advises on how to do more with less. In addition, CISA’s Cybersecurity Awareness Month campaign challenges tech vendors to build safer products. For more information about ICS/OT security, check out these Tenable blogs and videos: “ Three U.S.

Budget 67

Budget Report Survey Open Source 67

Tenable

JULY 12, 2023

Find out how Tenable OT Security is designed to give you in-depth asset visibility to address these new vulnerabilities without disrupting productivity. CVE-2023-3596 , a denial of service (DoS) vulnerability in Rockwell Automation Allen-Bradley ControlLogix Communication Modules for its 1756 EN4* product family.

Systems Review 52

Systems Review Network Technical Review Software Review 52

Tenable

DECEMBER 14, 2021

Log4Shell: 5 Steps The OT Community Should Take Right Now. Operational technology (OT) environments are equally at risk from the Apache Log4j flaw. Log4j is embedded in operational technology (OT) environments. In fact OT vendors are already releasing advisories on how their products are impacted. . Marty Edwards.

Infrastructure 100

Infrastructure Open Source Network Compliance 100

Tenable

MAY 15, 2023

Tenable is changing its products’ names to make them more descriptive, so that it’s easier for people to understand our portfolio and the capabilities we offer. Tenable customers, partners, employees and friends will notice a change in Tenable product names rolling out during 2023. Tenable Cloud Security Tenable.ot

Cloud 52

Cloud Applications Examples 52

Tenable

APRIL 17, 2023

Securing the modern attack surface — with its complex mix of on-premises and cloud infrastructure, web applications, identity and privilege management tools and operational technology (OT) — is a team effort. At Tenable, our channel partners are an integral part of this effort. Once again, congratulations to our winners.

Programming 98

Programming Network Cloud Trends 98

Tenable

NOVEMBER 4, 2021

One of the most important aspects of protection is deciding how to secure critical infrastructure and the Industrial Control Systems (ICS) and Operational Technology (OT) that underpin it. In most cases, OT systems are in continuous communication with the larger business environment that surrounds them, including the internet of things (IoT).

Systems Review 98

Systems Review Development Team Review Technical Review Software Review 98

Tenable

JUNE 27, 2023

Whatever name we want to put on it, the trend widely called digitization or convergence in IT/OT in manufacturing has its good and bad points. It is a pretty charged topic in the OT world, but bear with me. It would be more inclusive of OT, and really of anything that introduces cyber risk. So, what is a vulnerability?

Software Review 53

Software Review Firewall Windows Systems Review 53

Tenable

MARCH 8, 2024

One particularity, as the report found, is that cybersecurity staffers often wear multiple hats, so one person may be involved in application security (AppSec); product security; and identity and access management. The chart below shows the percentage of cybersecurity pros that support more than one functional area.

Infrastructure 117

Infrastructure Report Software Review Artificial Intelligence 117

Tenable

JUNE 1, 2022

A year after the ransomware attack against the Colonial Pipeline, what can we do to further harden the IT and OT systems of power plants, fuel pipelines, water treatment plants and similar critical infrastructure facilities? You need a dedicated, experienced and trained team for OT cybersecurity.

Infrastructure 98

Infrastructure Technical Review Transportation Systems Review 98

Tenable

JUNE 23, 2022

On June 20, Forescout’s Vedere Labs published their latest research findings into operational technology (OT) vulnerabilities titled OT:ICEFALL. This group has been examining vulnerabilities affecting OT security for a few years now and has produced notable findings including: NUCLEUS:13 , NAME:WRECK , NUMBER:JACK and AMNESIA:33.

Research 53

Research Security Technology Weak Development Team 53

Tenable

DECEMBER 2, 2022

Get the latest on Log4Shell’s global remediation status; the need for metaverse security rules; a shutdown of “pig butchering” domains; tips for secure IoT products; an informal poll about AD security; and more! . 1 - Tenable: 72% of organizations still vulnerable to Log4Shell. 126 webinar attendees polled by Tenable, November 2022).

IoT 52

IoT Guidelines Systems Review Technical Review 52

Tenable

MAY 9, 2023

We explore the impact of that gap on an organization’s cyber risk and discuss how Tenable can help. Tenable analyzes a wide array of weaknesses and misconfigurations and assesses the entire spectrum of information required to address needs in the above environments, including, but not limited to: Indicators of Exposure ( IoE ).

Organization 52

Organization Weak Development Team Research Fashion 52

Tenable

JUNE 3, 2020

IDC’s first-ever market share report for the worldwide device vulnerability management market ranks Tenable as #1 in market share for 2019 and credits the company for extending its reach far beyond vulnerability management. The report ranks Tenable as #1 in market share and revenue for the past two years. . Tenable processes over 1.5

Marketing 104

Marketing Machine Learning Artificial Inteligence Research 104

Tenable

APRIL 27, 2022

For the third consecutive year, Tenable ranks No. IDC credits Tenable’s success to our strong acquisition strategy that enables Tenable to discover more vulnerabilities on more attack surfaces. Tenable provides a Vulnerability Priority Rating in Tenable.io 1 in market share. and Tenable.sc Further, Tenable.cs

Marketing 52

Marketing Internet Google Cloud Infrastructure 52

Tenable

OCTOBER 27, 2023

government spotlights OSS security in OT environments Is your organization using open source software (OSS) in its operational technology (OT) environments? government that aims to create awareness about OSS security risks among OT users. You might want to check out a new fact sheet from the U.S.

Artificial Inteligence 65

Artificial Inteligence Artificial Intelligence Technical Review Backup 65

Tenable

APRIL 25, 2019

Tenable Industrial Security can now be sold, installed and managed by Siemens professional services staff, alongside the company’s SPPA-T3000 distributed control system. Tenable’s Industrial Security offering provides safe, reliable asset discovery and vulnerability detection purpose-built for OT environments.

Systems Review 78

Systems Review System Technical Review Industry 78

The Parallax

MAY 2, 2018

Weeks later, as if on cue, a maker of prominent industrial-control software acknowledged a potentially critical vulnerability in two of its products. The vulnerability, discovered by security company Tenable Research on January 18 , affects the 8.1 Nor does it know how many systems running the affected software remain unpatched.

Software Review 157

Software Review Industry Software Systems Review 157

Tenable

APRIL 22, 2021

At Tenable, we’ve made several key investments in our Tenable Assure partner program to help distributors, resellers and managed security service providers (MSSP) better support end-user organizations with the tools they need to understand and reduce cyber risk. This year, Tenable is going all-in on our channel efforts.

Games 98

Games IoT Programming Conference 98

Tenable

DECEMBER 9, 2022

One year later, we’ve learned from recently released Tenable telemetry research that Log4j’s Log4Shell remains very much an issue. Tenable found that, as of October 1, 2022: 72% of organizations remain vulnerable to Log4Shell. Find out vendors’ processes for disclosing, patching and updating vulnerabilities in their software products.

Software Review 52

Software Review SMB Malware Development Team Review 52

Tenable

MAY 19, 2022

During a recent podcast, Tenable's VP of Operational Technology Marty Edwards discussed the cyber threats faced by critical infrastructure providers and the importance of OT security, topics he'll address again next week during a LinkedIn Live with CNN. . It’s a topic that Tenable feels strongly about.

Infrastructure 54

Infrastructure Government Research Report 54

Tenable

OCTOBER 19, 2022

A presidential advisory committee report outlined strategies to improve government asset visibility, procurement and information sharing to enhance operational technology (OT) cybersecurity practices. Direct federal civilian agencies to inventory their OT assets. 23, 2022, the U.S. Draft NSTAC Report to the President, pp 1-2).

Policies 53

Policies Government Infrastructure Telecommunications 53

Tenable

AUGUST 4, 2020

A partnership between Tenable and JSOF continues to uncover additional devices vulnerable to Ripple20. On June 16, researchers from JSOF research lab disclosed a set of 19 vulnerabilities, dubbed “Ripple20” , which could impact millions of operational technology (OT), Internet of Things (IoT), and IT devices. Background. AudioCodes.

Software Review 106

Software Review Systems Review Research Internet 106

Tenable

JANUARY 27, 2021

Without a detailed view of the assets and vulnerabilities across your OT environment, security leaders face increased costs and delays when it comes to incident response efforts. Organizations must pivot to using continuous, real-time solutions to monitor the myriad of devices that come and go every day on our converged IT – OT networks.

Systems Review 90

Systems Review Technical Review Off-The-Shelf Firewall 90

Tenable

AUGUST 26, 2022

Tackling IT/OT cybersecurity challenges. Expect cloud workload security offerings to evolve from being siloed products into becoming integrated components of broader security and IT platforms in the next two years. CNAPP: What Is It and Why Is It Important for Security Leaders? ” (Tenable) . IT and OT teams are often siloed.

Weak Development Team 52

Weak Development Team Software Review Technical Review Budget 52

Tenable

AUGUST 25, 2023

3 – CISA to AI vendors: Put security at the heart of your software Artificial intelligence tools are, at their core, software products, and as such their developers must build them secure by design. To get all the details, read the joint alert , announcement and factsheet , and visit CISA’s “ Post-Quantum Cryptography Initiative ” homepage.

Malware 98

Malware Artificial Inteligence Open Source Artificial Intelligence 98

Tenable

SEPTEMBER 22, 2023

CISA mentions Tenable as one of its commercial partners that has integrated the KEV catalog into their products. Given this reality, makers of these IoT modules should ramp up their adoption of dedicated hardware security, and buyers should choose IoT products with this security feature.

Insurance 73

Insurance Trends IoT Software Review 73

Tenable

FEBRUARY 3, 2021

Here’s how Tenable can help. Tenable’s approach to the new NERC CIP requirements mirrors our handling of other regulatory requirements. Here are three aspects of Tenable’s OT security solution that can help streamline compliance for the power grid industry. Figure 3: Unified IT-OT dashboard in Tenable.sc.

Report 53

Report Policies Compliance Energy 53

Tenable

MAY 27, 2021

Here are three practical ways to disrupt attack paths in your OT infrastructure. . The symphony of operations required to find, extract, refine, mix, collaborate and ultimately deliver oil and gas all rely on operational technology (OT) infrastructure. Widely adopted by the production segment of the natural gas and oil industry.

Security 98

Security Guidelines Infrastructure Systems Review 98

Tenable

DECEMBER 2, 2020

As such, the WG4 questionnaire properly highlights the importance of vulnerability management for both vendor product development and operational cybersecurity. At Tenable, we are proud to work with our government partners to address cyber exposure and prioritize their most pressing cybersecurity issues.

Government 99

Government Fashion Groups Report 99

Tenable

APRIL 17, 2019

As IT and OT teams converge, industrial businesses need to create better cybersecurity plans and strategies to confront modern threats. That all started to change a little over a decade ago, and the worlds of IT and OT have been steadily converging ever since. IT tends to set the policy, but OT owns the controls," Gary added.

LAN 44

LAN Hardware Internet Enterprise 44