Tenable 部落格
CVE-2025-53786: Frequently Asked Questions About Microsoft Exchange Server Hybrid Deployment Elevation of Privilege Vulnerability
網路安全概要： CISA 指出勒索軟體可能進行刺探利用的重大基礎設施企業中的弱點
Learn about CISA’s new program to help critical infrastructure organizations stamp out vulnerabilities associated with ransomware attacks. Plus, a U.S. government advisory with the latest on LockBit 3.0. Also, find out why the U.K.’s cyber agency is warning users about ChatGPT. And much more! ...
Microsoft 的 2023 年 3 月 Patch Tuesday 解決了 76 個 CVE (CVE-2023-23397)
Microsoft addresses 76 CVEs including two zero-days exploited in the wild, one of which was publicly disclosed....
Tenable 網路觀察：Tenable 2022 年威脅態勢報告、2023 年最重大的網路風險以及網路架構師和工程師的薪水大幅增加
This week’s edition of Tenable Cyber Watch unpacks the top eight cybersecurity risks organizations face in 2023. Plus, we talk about the continued threat of unpatched, known vulnerabilities that are still being exploited by threat actors. Finally, we look at a new study that shows salaries are incre...
網路安全概要： Find MITRE ATT&CK Complex? Need Help Mapping to It? There’s an App for That!
Learn about a new tool that streamlines MITRE ATT&CK mapping. Plus, known vulnerabilities remain a major cyber risk – just ask LastPass. Also, discover why SaaS data protection remains difficult. Plus, a look at the U.S. National Cybersecurity Strategy. And much more!...
A New Incentive for Using AWS VPC Endpoints
If you haven’t been using VPC endpoints until now, AWS' two new condition keys should make you consider doing so....
Tenable OT 安全性中有哪些新功能：卓越的 IT/OT/IoT 資產搜尋以及進階威脅偵測等等
Tenable OT Security, formerly known as Tenable.ot, brings hybrid discovery capabilities and increased visibility for the broadest range of IT and OT devices, making it easier than ever for CISOs to manage security and risk....
多重雲端合規性的挑戰
使用 Amazon Web Services (AWS)、Microsoft Azure 和 Google Cloud Platform (GCP) 等公用雲端的企業都明白，每一款平台都有自己的一套運作方式，各平台之間的差異使得企業難以顧及所有平台的安全。In a recent episode of the Tenable Cloud Security Coffee Break we...
Managing Cloud Compliance and Security Posture with Cloud Compliance Tools
Why compliance and access security in the public cloud are so challenging – and how carefully-chosen CSPM tools can help....
Tenable 網路觀察：保護網路重要基礎架構、攻擊者在入侵資料方面居於上風等等
This week’s edition of the Tenable Cyber Watch unpacks the challenges in protecting cyber critical infrastructure and addresses cyberthieves gaining the upper hand in data compromises. Also covered: Why organizations should brace themselves for more cyberattacks targeting accounting and financial da...