CVE-2020-1938: Ghostcat - Apache Tomcat AJP File Read/Inclusion Vulnerability (CNVD-2020-10487)
Several proof-of-concept exploit scripts for recently patched flaw in Apache Tomcat are now available.BackgroundOn February 20, China National Vulnerability Database (CNVD) published a security advisory for CNVD-2020-10487, a severe vulnerability in Apache Tomcat’s Apache JServ Protocol (or AJP)…
Am I Smart or Just Lucky? Understanding Your Process Integrity Risk with Tenable Lumin
Business system risk and process integrity risk are two essential metrics for a mature risk-based vulnerability management practice. With new assessment maturity scoring, Tenable Lumin now gives you insights into both. Risk-based vulnerability management requires metrics addressing two types of…
Cash App 詐騙：免費贈品誘騙 Instagram 使用者，而 YouTube 影片則號稱可輕鬆賺錢
Cash App scammers are targeting users on Instagram and YouTube. Here’s what you need to know about their tactics — and how to avoid being conned.In part one of our two-part series on Cash App scammers, I explored how promotional tactics used by the popular person-to-person (P2P) payment…
如何選擇最適當的弱點管理解決方案
As vulnerability management evolves, organizations are seeing increased need for prioritization, benchmarking and flexible reporting. Here are five things to keep in mind when choosing a vulnerability management solution.Vulnerability management is once again rising to the top of the security…
Tenable Lumin：將弱點管理轉換為商業術語
With Tenable Lumin, we’re giving customers a bridge between the language of vulnerability management and the language of business. In our work here at Tenable, we often hear from our CISO customers about the dual challenges they face: How to help business executives and the board…
如何 利用 Nessus 執行您第一次的弱點掃描
Get your Nessus vulnerability assessment tool up and running with these five easy steps.With Nessus, you can gain full visibility into your network by conducting a vulnerability assessment. Read on as we guide you through the five steps to run your first Nessus scan. (If you have not yet installed…
資安團隊：弱點應變須知
Tenable’s Predictive Prioritization leverages data science and machine learning to make it easier for cybersecurity teams to find, patch and remediate vulnerabilities. Week after week, critical vulnerabilities in enterprise software are found and published, sending security teams off…
Nessus Home Is Now Nessus Essentials
We’ve given Nessus Home a refresh, and we’re excited to share with you the new and updated free vulnerability assessment solution, Nessus Essentials. As part of the Nessus family, Nessus Essentials is a free vulnerability assessment solution for up to 16 IPs that provides an entry point into…
拋開試算表，提高弱點管理成效
從 Nessus Pro 轉移至 Tenable.sc 或 Tenable.io 可以輕鬆協助企業使您的弱點管理方案更加完善。以下是幾點須知。您的弱點管理工作流程是否在任何時間點有需要用到試算表？如果有，在這點上就做得不對。Well, maybe not wrong per se, but…
以下是 16 個有關 Predictive Prioritization 問題的答案
Earlier this year, Tenable introduced Predictive Prioritization, a groundbreaking, data science-based process that re-prioritizes each vulnerability based on the likelihood it will be leveraged in an attack. Here, we answer your 16 most pressing questions about what this capability …
在 OT 安全性方面網路安全專業人員面臨嚴峻挑戰：Ponemon 報告
62% of organizations in industries relying on operational technology experienced two or more business-impacting cyberattacks in the past 24 months, according to a report from Ponemon Institute and Tenable.If you follow cybersecurity news as avidly as we do, you already know that industrial…
聯絡我們的銷售團隊