Tenable 部落格
CVE-2026-20127: Cisco Catalyst SD-WAN Controller/Manager Zero-Day Authentication Bypass Vulnerability Exploited in the Wild
網路安全概要： 如何大幅提升 AI 系統的網路安全，同時將風險降至最低
Check out expert recommendations for deploying AI tools securely. Plus, the World Economic Forum ranks cyberattacks and AI misinformation among today’s top global risks. In addition, cyber insurance demand is forecast to grow robustly. And a warning about adversary-in-the-middle (AiTM) attacks and…
CVE-2023-46805、CVE-2024-21887： Ivanti Connect Secure 和 Policy Secure Gateways 中受到刺探利用的零時差弱點
Two zero-day vulnerabilities in Ivanti Connect Secure and Ivanti Policy Secure have been exploited in the wild, with at least one attack attributed to nation-state actors.
Microsoft 的 2024 年 1 月 Patch Tuesday 解決了 48 個 CVE (CVE-2024-20674)
Microsoft addresses 48 CVEs in its January 2024 Patch Tuesday release with no zero-day or publicly disclosed vulnerabilities.
打造穩健的 OT 環境： 電力公用事業的捍衛戰士
近期對重大基礎設施的網路攻擊展現出駭客能夠如何利用工業控制系統。採用最新弱點管理最佳做法的企業，將能做好最充分的準備來降低風險及緩和可能的損害。
學習欣然接受稽核與合規 - 這是有可能的
對大多數企業而言，保護在公用雲端中的執行工作負載並遵守合規標準是不容妥協的事。 然而，整合必要的能見度、對應與監控功能，通常需要人工處理且相當耗時。 As a result, audits and compliance exercises…
網路安全概要： NIST Unpacks Cyberattacks Against AI Systems, as FBI Strikes ALPHV/Blackcat Ransomware Gang
Want to learn more about protecting AI systems from malicious actors? A new NIST guide aims to help you identify and mitigate attacks targeting AI tools. Plus, new granular configuration recommendations for securing Microsoft 365 are out. In addition, the cost of cyber incidents is rising. And…
$18.2 Million Funding Available for Tribal Government Cybersecurity
The Tribal Cybersecurity Grant Program (TCGP) is accepting applications through January 10, making $18.2 million in federal grant funding available to eligible tribes to reduce cyber risk.
Tenable OT Security： 2023 年年度回顧
As we reflect on the many accomplishments Tenable OT Security achieved in 2023, one thing is clear: we couldn’t have done it without the support and collaboration of our customers and partners.
網路安全概要： What’s in Store for 2024 in Cyberland? Check Out Tenable Experts’ Predictions for OT Security, AI, Cloud Security, IAM and more
The new year is upon us, and so we ponder the question: What cybersecurity trends will shape 2024? To find out, we asked Tenable experts to read the tea leaves. Their 2024 forecasts include: A bigger security role for cloud architects; a focus by ransomware gangs on OT systems in critical…