Tenable 部落格
網路安全概要： Refresh Your Akira Defenses Now, CISA Says, as OWASP Revamps Its App Sec Top 10 Risks
Assess Log4Shell Like an Attacker With Tenable’s Dynamic Detections
Defenders need to pull out all the stops when it comes to Log4Shell. Tenable provides dynamic remote Log4Shell vulnerability detections to incorporate the attacker’s perspective of your organization.
CVE-2021-44228、CVE-2021-45046、CVE-2021-4104：有關 Log4Shell 及相關弱點的常見問答集
有關 Log4Shell 及相關弱點的常見問答集
Microsoft’s December 2021 Patch Tuesday Addresses 67 CVEs (CVE-2021-43890)
Microsoft addresses 67 CVEs in its December 2021 Patch Tuesday release, including a zero-day vulnerability that has been exploited in the wild.
Log4Shell：OT 社群應立即採取的 5 個步驟
操作技術 (OT) 環境同樣也面臨 Apache Log4j 軟體缺陷帶來的風險。以下是您現在就可以採取的行動。
Apache Log4j 缺陷：網路安全產業的福島核電廠等級重大事故
Organizations around the world will be dealing with the long-tail consequences of this vulnerability, known as Log4Shell, for years to come.
Apache Log4j 缺陷讓第三方軟體成為目光焦點
Even in the most mature organizations, addressing the issue, also known as Log4Shell, requires a complex mix of software development practices, vulnerability management and web application scanning.
CVE-2021-44228：Apache Log4j 重大遠端程式碼執行弱點 (Log4Shell) 概念驗證已可供使用
常用記錄程式庫 Log4j 2 中的重大弱點影響了許多服務與應用程式，包括：Minecraft、Steam 和 Apple iCloud。攻擊者已開始積極掃描並嘗試惡意刺探此軟體缺陷。
How to Start Up Your Cloud Security
Startups may think they can postpone implementing a cloud security program but should in fact take early action — here’s why, and easy steps for doing so.
全新推出的 Tenable.cs：完整的生命週期，雲端原生安全性
新產品將我們近期收購的 Accurics 平台加以延伸，專門針對基礎架構即程式碼 (IaC) 的開發與執行階段工作流程，利用整合式控制機制提供 DevSecOps 並提早納入安全性 (shift left security)。
聯絡我們的銷售團隊