Tenable blog
網路安全概要： SharePoint Attacks Trigger Urgent Patching Calls, While U.S. Gov’t Unveils AI Innovation Plan
Apache Log4j 缺陷讓第三方軟體成為目光焦點
Even in the most mature organizations, addressing the issue, also known as Log4Shell, requires a complex mix of software development practices, vulnerability management and web application scanning....
CVE-2021-44228：Apache Log4j 重大遠端程式碼執行弱點 (Log4Shell) 概念驗證已可供使用
常用記錄程式庫 Log4j 2 中的重大弱點影響了許多服務與應用程式，包括：Minecraft、Steam 和 Apple iCloud。Attackers have begun actively scanning for and attempting to exploit the flaw....
How to Start Up Your Cloud Security
Startups may think they can postpone implementing a cloud security program but should in fact take early action — here’s why, and easy steps for doing so....
全新推出的 Tenable.cs：完整的生命週期，雲端原生安全性
The new offering extends the recently acquired Accurics platform to enable DevSecOps and “shift left security” with integrated controls for development and runtime workflows, focused on Infrastructure as Code (IaC)....
保障 IT-OT 環境的安全：何以 IT 安全專業人員總是力不從心
When providing cybersecurity in converged IT and operational technology environments, it’s critical for infosec pros to understand the differences between the two and utilize a toolset that delivers a comprehensive picture of both in a single view....
#GivingTuesday: Favorite Charities of Tenable Employees
This year for #GivingTuesday, we highlight some of the causes that Tenable employees have championed this year and invite you to do the same. ...
Not Just Buckets: Are You Aware of ALL Your Public Resources?
A misconfiguration of resource-based policies can inadvertently make resources public. Do you have such misconfigured policies present in your environment?...
Fake Bitcoin, Ethereum, Dogecoin, Cardano, Ripple and Shiba Inu Giveaways Proliferate on YouTube Live
Scammers are leveraging compromised YouTube accounts to promote fake cryptocurrency giveaways for Bitcoin, Ethereum, Dogecoin, Cardano, Ripple, Shiba Inu and other cryptocurrencies....
Identifying Server Side Request Forgery: How Tenable.io Web Application Scanning Can Help
Learn how SSRF flaws arise, why three common attack paths are so challenging to mitigate and how Tenable.io Web Application Scanning can help....
