Tenable 部落格
隆重推出 Tenable AI Exposure： 告別猜測，開始保護您的 AI 攻擊破綻
Oracle 2024 年 1 月重大修補程式更新解決了 191 個 CVE
Oracle addresses 191 CVEs in its first quarterly update of 2024 with 389 patches, including 37 critical updates....
CVE-2023-6548、CVE-2023-6549：Citrix NetScaler ADC 和 NetScaler Gateway 中受到刺探利用的零時差弱點
Two zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway have been exploited in the wild. Urgent patching is required to address these flaws....
展望未來： 2024 年值得關注的 5 大雲端安全趨勢
生成式 AI 無疑將會大幅提高企業的網路安全功能。 但是，如果不先強制執行完善的雲端安全原則，網路安全部門可以從生成式 AI 得到的效益相當微小。 In this blog, we explain the top cloud security trends that organizations must track – an...
網路安全概要： 如何大幅提升 AI 系統的網路安全，同時將風險降至最低
Check out expert recommendations for deploying AI tools securely. Plus, the World Economic Forum ranks cyberattacks and AI misinformation among today’s top global risks. In addition, cyber insurance demand is forecast to grow robustly. And a warning about adversary-in-the-middle (AiTM) attacks and h...
CVE-2023-46805、CVE-2024-21887： Ivanti Connect Secure 和 Policy Secure Gateways 中受到刺探利用的零時差弱點
Two zero-day vulnerabilities in Ivanti Connect Secure and Ivanti Policy Secure have been exploited in the wild, with at least one attack attributed to nation-state actors....
Microsoft 的 2024 年 1 月 Patch Tuesday 解決了 48 個 CVE (CVE-2024-20674)
Microsoft addresses 48 CVEs in its January 2024 Patch Tuesday release with no zero-day or publicly disclosed vulnerabilities....
打造穩健的 OT 環境： 電力公用事業的捍衛戰士
近期對重大基礎設施的網路攻擊展現出駭客能夠如何利用工業控制系統。Organizations that adopt the latest vulnerability management best practices will be best prepared to reduce risk and mitigate possible damage....
學習欣然接受稽核與合規 - 這是有可能的
對大多數企業而言，保護在公用雲端中的執行工作負載並遵守合規標準是不容妥協的事。 然而，整合必要的能見度、對應與監控功能，通常需要人工處理且相當耗時。 As a result, audits and compliance exercises ...
網路安全概要： NIST Unpacks Cyberattacks Against AI Systems, as FBI Strikes ALPHV/Blackcat Ransomware Gang
Want to learn more about protecting AI systems from malicious actors? A new NIST guide aims to help you identify and mitigate attacks targeting AI tools. Plus, new granular configuration recommendations for securing Microsoft 365 are out. In addition, the cost of cyber incidents is rising. And there...