Tenable 部落格
Crushing the Axios supply chain threat with Tenable Hexa AI: Use cases for agentic AI
代理程式型與無代理程式型的比較：哪一種解決方案最適合您的公用雲端環境？
You can scan cloud systems for security problems in multiple ways depending on what your instances are running, how long they’re up and whether or not they can run an agent or be accessed with administrative credentials. Network scanning, installed agents, or public cloud APIs can all report…
Microsoft 在 2023 年 4 月份的 Patch Tuesday 中解決了 97 個 CVE (CVE-2023-28252)
Microsoft addresses 97 CVEs, including one that was exploited in the wild as a zero day.
美國運輸安全管理局 (TSA)、美國聯邦航空總署 (FAA) 的規定針對機場、飛航器業者和機場航廈專案強調網路安全的重要性：Tenable 能够带来哪些助益
The TSA and FAA are making cybersecurity a priority for airport and aircraft operators and for airport terminal projects to prevent disruption and degradation to their infrastructure. Here's what you need to know — and how Tenable can help.
Tenable 網路觀察：美國政府認真考慮禁用 TikTok、歐洲刑警組織 (Europol) 對 ChatGPT 的網路風險提出警告等等
This week’s edition of the Tenable Cyber Watch unpacks the U.S. government’s efforts to ban TikTok and addresses Europol’s concerns about ChatGPT cyber risks. Also covered: How CISA’s new pre-ransomware alert initiative could be a gamechanger for would-be ransomware victims.
網路安全概要： 使用 ChatGPT 有可能會導致違反資料隱私權
Learn how businesses can run afoul of privacy laws with generative AI chatbots like ChatGPT. Plus, the job market for cyber analysts and engineers looks robust. Also, cybercrooks lost a major resource with the Genesis Market shutdown. In addition, the six common mistakes cyber teams make. And much…
Terraform Lab: Taking the New VPC Endpoint Condition Keys Out for a Spin
Our new open source Terraform project offers hands-on experience with VPC endpoints and demos AWS's new condition keys for securing EC2 instances
Tenable 網路觀察：對應 MITRE ATT&CK 的協助、何以企業面對 SaaS 資料保護問題力不從心等等
This week’s edition of the Tenable Cyber Watch unpacks CISA’s new ‘Decider” tool, which aims to streamline MITRE ATT&CK mapping. We also explore why organizations struggle with data protection of software as a service apps. Also covered: Why cyber pros think cloud creates opportunities for cyber…
網路安全概要： CISA Issues Incident Response Tool for Microsoft Cloud Services
Learn about a free tool for detecting malicious activity in Microsoft cloud environments. Plus, Europol warns about ChatGPT cyber risks. Also, how business email compromise (BEC) scammers are stealing merchandise. In addition, CISA alerts orgs about early-stage ransomware breaches. And much more!
據稱 3CX Desktop App for Windows and macOS 在供應鏈攻擊中遭到入侵
A softphone desktop application from 3CX, makers of a popular VoIP PBX solution used by over 600,000 organizations, has reportedly been trojanized as part of a supply chain attack
