Tenable

High-profile Twitter accounts hijacked to push Bitcoin scam. How did it happen?

July 16, 2020

The Twittersphere went into overdrive on Wednesday as a bunch of prominent, verified Twitter accounts were hijacked and started promoting a COVID-19 cryptocurrency giveaway …

Critical flaw opens Palo Alto Networks firewalls and VPN appliances to attack, patch ASAP!

June 30, 2020

Palo Alto Networks has patched a critical and easily exploitable vulnerability (CVE-2020-2021) affecting PAN-OS, the custom operating system running on its next generation …

The importance of effective vulnerability remediation prioritization

June 9, 2020

Too many organizations have yet to find a good formula for prioritizing which vulnerabilities should be remediated immediately and which can wait. According to the results of …

Using Cisco IP phones? Fix these critical vulnerabilities

April 16, 2020

Cisco has released another batch of fixes for a number of its products. Among the vulnerabilities fixed are critical flaws affecting a variety of Cisco IP phones and Cisco UCS …

PPP Daemon flaw opens Linux distros, networking devices to takeover attacks

March 10, 2020

A vulnerability (CVE-2020-8597) in the Point-to-Point Protocol Daemon (pppd) software, which comes installed on many Linux-based and Unix-like operating systems and networking …

Photos: RSA Conference 2020, part 2

February 26, 2020

RSA Conference 2020 is underway at the Moscone Center in San Francisco. Check out our microsite for the conference for all the most important news. Part one of the photos is …

Tenable acquires Indegy to create unified, risk-based platform for IT and OT security

December 5, 2019

Tenable, the Cyber Exposure company, announced that it has acquired Indegy, a leader in industrial cybersecurity which provides visibility, security and control across …

Apache Solr RCEs with public PoCs could soon be exploited

November 25, 2019

Two remote code execution (RCE) vulnerabilities in Apache Solr could be exploited by attackers to compromise the underlying server. One – CVE-2019-12409 – has …

PHP RCE flaw actively exploited to pop NGINX servers

October 28, 2019

A recently patched vulnerability (CVE-2019-11043) in PHP is being actively exploited by attackers to compromise NGINX web servers, threat intelligence firm Bad Packets has …

August 2019 Patch Tuesday: Microsoft plugs critical wormable RDP holes

August 14, 2019

It’s that time of the month again: Microsoft, Adobe and Intel have pushed out fixes for a bucketload of security issues in their various software. Microsoft’s …

Tenable unveils new product innovations in Tenable.sc and Tenable.io

August 8, 2019

Tenable, the Cyber Exposure company, announced at Black Hat USA 2019 new product innovations in Tenable.sc (formerly SecurityCenter) and Tenable.io to continuously discover …

Citrix plugs critical Citrix SD-WAN flaws, patch ASAP!

July 12, 2019

Researchers have found critical vulnerabilities in Citrix SD-WAN, one of the most widely used SD-WAN solutions out there, and are urging administrators to patch them as soon …