Tenable 部落格
CVE-2026-20127: Cisco Catalyst SD-WAN Controller/Manager Zero-Day Authentication Bypass Vulnerability Exploited in the Wild
網路安全概要： Cyber Pros Say How AI Is Changing Their Work, While the FBI Reports Ransomware Hit Critical Infrastructure Hard in 2023
More than 40% of ransomware attacks last year impacted critical infrastructure. Plus, a survey shows how artificial intelligence is impacting cybersecurity jobs. Meanwhile, MITRE updated a database about insider threats. And why you need a custom compensation strategy to recruit cyber pros. And…
CVE-2024-27198、CVE-2024-27199： 在 JetBrains TeamCity 中的 2 個迴避身分驗證的弱點
Two vulnerabilities with publicly available exploit code in JetBrains TeamCity on-premises software could result in attackers bypassing authentication and achieving code execution.
網路安全概要： NIST’s Cybersecurity Framework Gets Major Update, as Advisories on APT29 and ALPHV Blackcat Get Rolled Out
Check out what’s new in NIST’s makeover of its Cybersecurity Framework. Plus, the latest guidance on cyberattack groups APT29 and ALPHV Blackcat. Also, how to assess the cybersecurity capabilities of a generative AI LLM. And the most prevalent malware in Q4. 還有更多內容等您探索！
如何利用一套曝險管理平台保護您所有的資產，包括：IT、OT 和 IoT
企業的安全團隊面臨捍衛其重大 OT/IoT 基礎設施的嚴峻阻礙，包括：支離破碎的能見度、意料之外的風險以及資料孤島等。Discover how purpose-built solutions for OT/IoT exposure management can help organizations enhance visibility, prioritize…
網路安全概要： 正當 CISO 強調自來水廠的安全性時，LockBit 集團遭到破獲
Check out how cyber agencies from multiple countries hit the LockBit ransomware group. Meanwhile, CISA wants water treatment plants to button up their cyber defenses. Plus, there’s a new generative AI governance checklist for tech and business leaders. And the White House seeks to boost ports'…
利用先進的 OT 安全保護美國國防部建築物管理系統
The cyberthreats to the U.S. Department of Defense’s building management systems (BMS) have grown exponentially due to the DoD's adoption of smart technologies such as IoT. These smart technologies are designed to improve the monitoring and maintenance of these systems, but they also create new…
有關 ScreenConnect 弱點的常見問答集
Frequently asked questions about two vulnerabilities affecting ConnectWise ScreenConnect
Managed Kubernetes: Is It Right for My Organization?
As an organization grows its usage of containers, managing them becomes more complex. A common response is to adopt Kubernetes for container orchestration. But how do you properly secure your Kubernetes clusters? And should your organization host its Kubernetes deployments or instead choose a…
