Tenable.io and Tenable.io WAS Achieve FedRAMP Authorization
Six reasons why FedRAMP authorization for Tenable.io and Tenable.io Web App Scanning (WAS) is important for our customers and partners.After lengthy and rigorous testing under the U.S. Federal Risk and...
View ArticleCybersecurity Awareness: Six Tips to Help Your Employees Be Cybersmart
We believe it's time for a new approach to cyber awareness, one that borrows on the concept of the shared responsibility model common in cloud computing. Here's how we get there.How much consideration...
View ArticleMicrosoft’s October 2021 Patch Tuesday Addresses 74 CVEs (CVE-2021-40449)
3Critical70Important0Moderate1LowMicrosoft patched 74 CVEs in the October 2021 Patch Tuesday release, including three rated as critical, 70 rated as important and one rated as low. This is the eighth...
View ArticleSpotlight on Brazil: Remote Work Requires New Risk Management Practices
Remote work is here to stay — along with the risks it introduces to Brazilian organizations, if not managed properly. Here's what you need to know.The pandemic forced many Brazilian organizations to...
View ArticleAs a Busy 2021 Draws to a Close, What is Capitol Hill Focusing on Next?
Cybersecurity priorities like zero trust, infrastructure security and more must remain top of mind for Congress in 2022 2021 has proven to be a big year for cybersecurity. Zero trust, a concept...
View ArticleSpotlight on Japan: Digital Transformation Initiatives Heighten Risk Levels
As Japanese organizations roll out digital transformation initiatives and expand remote workforces, security teams need to address new risks in the new world of work.The rapid transition to remote work...
View ArticleCVE-2021-22005: Critical File Upload Vulnerability in VMware vCenter Server
VMware published an advisory addressing 19 vulnerabilities, including one critical flaw in vCenter Server that is reportedly simple to exploit.BackgroundOn September 21, VMware published a security...
View ArticleSpotlight on Japan: Digital Transformation Initiatives Heighten Risk Levels
As Japanese organizations roll out digital transformation initiatives and expand remote workforces, security teams need to address new risks in the new world of work.The rapid transition to remote work...
View Article3 Qualifications Cyber Safety Review Board Members Must Have
Expertise in security forensics, technology development and aligning cybersecurity with business goals are essential to advising federal policymakers following significant cyber incidents.In May,...
View ArticleFive Professionals Explain Why You Should Start a Career in the Vital and...
Don't assume you need programming expertise. Don't be intimidated and don’t place limits on yourself.You have an interest in tech. You want to make the world a better place. You’re intrigued by the...
View ArticleOracle October 2021 Critical Patch Update Addresses 231 CVEs
Oracle addresses 231 CVEs in its final quarterly update of 2021 with 419 patches, including 36 critical updates.BackgroundOn October 19, Oracle released its Critical Patch Update (CPU) for October...
View ArticleNarrow Focus on CVEs Leaves Organizations Vulnerable to Attacks
CWE’s and other vulnerabilities necessitate a single dashboard for complete cyber risk assessment A growing number of cybersecurity professionals have evolved their legacy vulnerability management...
View ArticleTikTok LIVE Scams: Stolen Live Footage Used to Earn TikTok Gifts, Promote...
Stolen video footage of celebrities, content creators and others is being used by scammers in TikTok LIVE streams to earn TikTok gifts, peddle questionable products and drive users to adult dating...
View ArticleActive Directory is Now in the Ransomware Crosshairs
A flurry of ransomware operators are now targeting Active Directory (AD) as a core step in the attack path. Understanding the details can help you ensure your AD environment is secure.Over the past...
View ArticleExamining the Treat Landscape
Are you leaving treats on the table for attackers? Understand the current treat landscape and how to reduce your exposure.BackgroundThe threat landscape is like a bowl of candy, full of options for...
View ArticleNessus 10.0: Vulnerability Assessment for Today’s Dynamic Environments
New features are designed to offer the portability, efficiency and ease-of-use needed to protect the ever-expanding attack surface.The widespread shift to remote work has atomized the attack surface,...
View ArticleCISA’s Binding Operational Directive on Managing Unacceptable Risk...
Federal agencies should leverage Tenable’s vulnerability priority rating (VPR) to effectively manage the nearly 300 vulnerabilities identified.This week, the Cybersecurity and Infrastructure Security...
View ArticleHow to Choose an OT Cybersecurity Solution Vendor
Hint: choose a leader in ICS Security.As cyberattacks in critical infrastructure, such as those on the Colonial Pipeline, make headlines, cybersecurity experts must address the risk that this esoteric...
View ArticleMicrosoft’s November 2021 Patch Tuesday Addresses 55 CVEs (CVE-2021-42321)
6Critical49Important0Moderate0LowMicrosoft patched 55 CVEs in the November 2021 Patch Tuesday release, including six rated as critical, and 49 rated as important.This month’s update includes patches...
View ArticleCISA Directive 22-01: How Tenable Can Help You Find and Fix Known Exploited...
While U.S. federal agencies are required to remediate the vulnerabilities outlined in the U.S. Cybersecurity and Infrastructure Security Agency's Binding Operational Directive 22-01, any organization...
View Article