Microsoft’s December 2022 Patch Tuesday Addresses 48 CVEs (CVE-2022-44698)
Microsoft’s December 2022 Patch Tuesday Addresses 48 CVEs (CVE-2022-44698)Microsoft addresses 48 CVEs including two zero-day vulnerabilities, one that has been exploited in the wild (CVE-2022-44698)...
View ArticleCybersecurity Snapshot: Phishing Scams, Salary Trends, Metaverse Risks, Log4J...
Get the latest on worrisome phishing stats; businesses’ embrace of the metaverse, come what may; a (small) improvement in CISO job stability; the compensation cost of security leaders; and more!Dive...
View ArticleTenable Cyber Watch: Policing the Metaverse, Securing AI and ML, Daixin's...
To help you zap those Monday blahs, here’s a caffeinated shot of cyber news you can use: Police chiefs must get hip to the metaverse. CISOs are shifting to integrated cybersecurity platforms. There's...
View ArticleCVE-2022-37958: FAQ for Critical Microsoft SPNEGO NEGOEX Vulnerability
CVE-2022-37958: FAQ for Critical Microsoft SPNEGO NEGOEX VulnerabilityMicrosoft recently reclassified a vulnerability in SPNEGO NEGOEX, originally patched in September, after a security researcher...
View ArticlePatch Tuesday’s Impact on Cybersecurity Over the Years
Patch Tuesday’s Impact on Cybersecurity Over the YearsDive into the history of Patch Tuesday and learn how it continues to influence the ways security teams manage patches.Background on MS Patch...
View ArticleCybersecurity Snapshot: Six Predictions from Tenable for 2023
As 2022 draws to a close, we asked Tenable experts what they expect for the new year. After reading the tea leaves, they’re forecasting developments in extortion attacks, OT security, SaaS threats,...
View ArticleCVE-2022-47939: Critical RCE Vulnerability in Linux Kernel
CVE-2022-47939: Critical RCE Vulnerability in Linux KernelA critical remote code execution vulnerability in the Linux kernel has been publicly disclosed by Trend Micro's Zero Day Initiative in its...
View ArticleCybersecurity Snapshot: Key 2022 Data for Cloud Security, Vulnerability...
As 2022 ends, we highlight important data points that shine a light on the trends, challenges and best practices that matter to cybersecurity leaders eager to boost their exposure management and reduce...
View ArticleTenable Cyber Watch: What Do Our Experts Predict for 2023?
Banish the post-holiday blues with news you can use: this week’s episode of Tenable Cyber Watch takes a look at four cybersecurity trends to prepare for in 2023. Learn why ransomware extortion, OT...
View ArticleVisibility of the Unknown: Understanding EASM and How It Can Help
External attack surface management (EASM) is difficult and oftentimes confusing, especially in a world of poor inventory controls and a growing attack surface. This blog discusses what’s required to do...
View ArticleCVE-2022-47523: ManageEngine Password Manager Pro, PAM360 and Access Manager...
CVE-2022-47523: ManageEngine Password Manager Pro, PAM360 and Access Manager Plus SQL Injection VulnerabilityZoho patches a newly disclosed high-severity SQL injection flaw in several ManageEngine...
View ArticleCybersecurity Snapshot: Discover the Most Valuable Cyber Skills, Key Cloud...
Happy New Year! Learn all about the cybersecurity expertise that employers value most; Google Cybersecurity Action Team’s latest take on cloud security trends; a Deloitte report on cybersecurity’s...
View ArticleTenable Cyber Watch: Key 2022 Data for Cloud Security, VM, EASM, Web App...
It's that time again! Time to grab another cup of coffee and tune into this week's episode of the Tenable Cyber Watch newscast, the weekly video news digest that helps you zero-in on the things that...
View ArticleMicrosoft’s January 2023 Patch Tuesday Addresses 98 CVEs (CVE-2023-21674)
Microsoft’s January 2023 Patch Tuesday Addresses 98 CVEs (CVE-2023-21674)Microsoft addresses 98 CVEs including a zero-day vulnerability that was exploited in the...
View ArticleGoogle: Monitor These Emerging Cloud Security Challenges in 2023
A new report from Google outlines a set of evolving threats that cloud security teams should keep an eye on in the new year.In its latest “Threat Horizons” report, Google’s Cybersecurity Action Team...
View ArticleCybersecurity Snapshot: U.S. Gov’t Turns Up Heat on Breach Notifications,...
Learn all about the FCC’s plan to accelerate telecom breach reports. Plus, why cyber worries remain a cloud obstacle. Also, find out how to rate your cloud MSP’s cybersecurity strength. Then check out...
View ArticleTenable Cyber Watch: Top-In Demand Cyber Skills, Key Cloud Security Trends,...
We've got a new, must-see episode of the Tenable Cyber Watch, the weekly video news digest that help you zero-in on the things that matter right now in cybersecurity. It's Monday! Time to grab another...
View ArticleYou Can't Fix Everything: How to Take a Risk-Informed Approach to...
Frameworks and standards for prioritizing vulnerability remediation continue to evolve, yet far too many organizations rely solely on CVSS as their de facto metric for exposure management. Here, we...
View ArticleOracle January 2023 Critical Patch Update Addresses 183 CVEs
Oracle January 2023 Critical Patch Update Addresses 183 CVEsOracle addresses 183 CVEs in its first quarterly update of quarterly with 327 patches, including 71 critical updates.BackgroundOn January 17,...
View ArticleCybersecurity Snapshot: CISOs Are Happier, but Dev Teams Still Lack Secure...
Learn all about the spike in CISO job satisfaction. Plus, NIST mulls major makeover of its Cybersecurity Framework. Also, the struggle to develop secure apps is real. Then check out how Uncle Sam plans...
View Article