Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Tenable 部落格

February 20, 2026

Dynamic Objects in Active Directory: The Stealthy Threat

Active Directory’s "dynamic objects" feature offers attackers a perfect evasion cloak. These objects automatically self-destruct without a trace, so they allow adversaries to bypass quotas, pollute access lists, and persist in the cloud, leaving forensic investigators with nothing to analyze.

January 13, 2022

Testing the Waters: First Impressions of CloudTrail Lake

Our first impressions of AWS's new managed audit and security lake that allows you to aggregate, immutably store, and query activity logs.


January 12, 2022

YouTube Shorts: Stolen TikTok Videos Manipulated in Adult Dating, Dubious Products Scams for Views and Subscribers

As Google's TikTok competitor YouTube Shorts gains viewers, hordes of scammers are quick to follow.


January 11, 2022

Tracking Adversaries in AWS Using Anomaly Detection

Here’s how to minimize the impact of a breach by identifying malicious actors’ anomalous behavior and taking action.


January 11, 2022

Microsoft’s January 2022 Patch Tuesday Addresses 97 CVEs (CVE-2022-21907)

Microsoft addresses 97 CVEs in its January 2022 Patch Tuesday release, including four zero-day vulnerabilities that were publicly disclosed but not exploited in the wild. 9Critical 88Important 0Moderate 0Low Update January 13: The Solutions section has been updated to reflect…


January 6, 2022

SEGA’s Saga of Nearly Compromised Credentials

A look at VPNO’s recent findings of publicly accessible S3 buckets on SEGA’s infrastructure and what we can learn from it.


December 29, 2021

Python NaN Injection

In Python, a NaN can cause a slew of errors leading to numerous failure conditions. Test for NaNs using a white-box scenario to avoid fallout.


December 29, 2021

Protect Your AWS Environment Beyond Patching Log4j

Check out crucial strategic lessons overlooked by enterprises dealing with the recently reported Log4j vulnerability.


December 22, 2021

1/10 受評估的資產都容易遭到 Log4Shell 攻擊

現在如果不解決,這個問題將會改寫 2022 年的運算環境。


您可以利用的網路安全最新消息

輸入您的電子郵件,就不會錯過來自 Tenable 專家提供的及時警示與安全指引。