Tenable Network Security Podcast - Episode 4
Welcome to the Tenable Network Security Podcast - Episode 4
Announcements
- We've moved our video site! Due to some problems with Blip, all of our videos can now be found on YouTube in Tenable Security's Video Channel (http://www.youtube.com/tenablesecurity).
- New whitepaper titled "Web Application Scanning with Nessus" has been released and covers some of the updated features added to Nessus in support of web application testing..
- Nessus 4.0.2 has been released, featuring support for Windows 7 and Snow Leopard.
- As always be sure to check out our blog at http://blog.tenablesecurity.com
- A new presentation has been posted to the Tenable Web Site. It is titled "Bob's Great Adventure: Attacking and Defending Web Applications" by Paul Asadoorian"
Interview: Ross Barrett: Technology smorgasbord
- What are some of the major features gained in SNMPv3?
- Why is it important to secure SNMP in your environment?
- What changes have you made in Nessus to better support SNMPv3?
- Tell me about some of the changes to Windows file monitoring added to Nessus configuration auditing.
- Along those lines, tell us about power managment auditing.
- What benefits do organizations gain by auditing power management?
Stories For This Week
- PC Infections Are Found To Be Long Term
- Malware Authors Moving To Open Source
- SANS Top Cyber Risks Published
- Great Post On Zues Bot - "The nasty thing about Zeus/Zbot is that it evolves. The latest generation bot uses rootkit techniques to hide its presence on a customer machine. The bot uses covert methods of injecting additional fields into online Internet banking websites, asking users to answer questions that the authentic website would not ask. The collected details are then silently delivered to remote websites, and added into remote databases. The databases are then sold to other criminal elements down the chain who specialize in withdrawing the funds."
Tenable Events
- Ron Gula will be speaking at the Hacker Halted conference in Miami on September 23, 2009
- Paul Asadoorian and others from Tenable Network Security will be attending Cyber Dawn Cyber Exercise on October 3-4, 2009
- Paul Asadoorian will be speaking at the Louisville Infosec conference on web application security on October 7, 2009
Related Articles
Tenable Network Security Podcast Episode 198 - "PCI Discussion Featuring Jeffrey Man"
February 13, 2014<p></p>
CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
August 14, 2024Ivanti released a patch for a critical severity authentication bypass vulnerability and a warning that exploit code is publicly available
Microsoft’s August 2024 Patch Tuesday Addresses 88 CVEs
August 13, 2024Microsoft addresses 88 CVEs with seven critical vulnerabilities and 10 zero-day vulnerabilities, six of which were exploited in the wild.
Compromising Microsoft's AI Healthcare Chatbot Service
August 13, 2024Tenable Research discovered multiple privilege-escalation issues in the Azure Health Bot Service via a server-side request forgery (SSRF), which allowed researchers access to cross-tenant resources.
- Podcast