Microsoft 在 2023 年 4 月份的 Patch Tuesday 中解決了 97 個 CVE (CVE-2023-28252)
Microsoft addresses 97 CVEs, including one that was exploited in the wild as a zero day....
美國運輸安全管理局 (TSA)、美國聯邦航空總署 (FAA) 的規定針對機場、飛航器業者和機場航廈專案強調網路安全的重要性：Tenable 能够带来哪些助益
The TSA and FAA are making cybersecurity a priority for airport and aircraft operators and for airport terminal projects to prevent disruption and degradation to their infrastructure. Here's what you need to know — and how Tenable can help....
Tenable 網路觀察：美國政府認真考慮禁用 TikTok、歐洲刑警組織 (Europol) 對 ChatGPT 的網路風險提出警告等等
This week’s edition of the Tenable Cyber Watch unpacks the U.S. government’s efforts to ban TikTok and addresses Europol’s concerns about ChatGPT cyber risks. Also covered: How CISA’s new pre-ransomware alert initiative could be a gamechanger for would-be ransomware victims. ...
網路安全概要： 使用 ChatGPT 有可能會導致違反資料隱私權
Learn how businesses can run afoul of privacy laws with generative AI chatbots like ChatGPT. Plus, the job market for cyber analysts and engineers looks robust. Also, cybercrooks lost a major resource with the Genesis Market shutdown. In addition, the six common mistakes cyber teams make. And much m...
Terraform Lab: Taking the New VPC Endpoint Condition Keys Out for a Spin
Our new open source Terraform project offers hands-on experience with VPC endpoints and demos AWS's new condition keys for securing EC2 instances...
Tenable 網路觀察：對應 MITRE ATT&CK 的協助、何以企業面對 SaaS 資料保護問題力不從心等等
This week’s edition of the Tenable Cyber Watch unpacks CISA’s new ‘Decider” tool, which aims to streamline MITRE ATT&CK mapping. We also explore why organizations struggle with data protection of software as a service apps. Also covered: Why cyber pros think cloud creates opportunities for cyber tea...
網路安全概要： CISA Issues Incident Response Tool for Microsoft Cloud Services
Learn about a free tool for detecting malicious activity in Microsoft cloud environments. Plus, Europol warns about ChatGPT cyber risks. Also, how business email compromise (BEC) scammers are stealing merchandise. In addition, CISA alerts orgs about early-stage ransomware breaches. And much more! ...
據稱 3CX Desktop App for Windows and macOS 在供應鏈攻擊中遭到入侵
A softphone desktop application from 3CX, makers of a popular VoIP PBX solution used by over 600,000 organizations, has reportedly been trojanized as part of a supply chain attack...
混合雲端環境安全的 5 大核心原則
How to build a hybrid-cloud security strategy that is effective, scalable and affordable. ...
曝險管理： 平台方法的七大優勢
提到預防性網路安全，長久以來爭論的問題就在於操作各式各樣同級最佳單一功能解決方案的效果較佳？還是採取更整合式的平台方式較佳？ Here are seven reasons an exposure management platform can help reduce cyber risk....
EPA 針對公共用水系統頒布網路安全法規：Tenable 能够带来哪些助益
EPA released new regulations that require states to assess cybersecurity risks at drinking water systems and ensure these systems have sufficient cyber protections. Here’s what you need to know — and how Tenable can help....
Tenable 網路觀察：英國網路機構對於 ChatGPT 提出隱私疑慮、CISA 方案應對在重大基礎設施中的勒索軟體問題以及更多議題
This week’s edition of the Tenable Cyber Watch unpacks CISA’s new pilot program that detects vulnerabilities in critical infrastructure and addresses the FBI’s plea for more ransomware victims to report attacks. Also covered: Why the U.K. National Cyber Security Centre is warning ChatGPT users to tr...