Tenable Network Security Podcast Episode 163 - "Bind Vulnerability, Windows Hardening"
Announcements
- We're hiring! - Visit the Tenable website for more information about open positions.
- Check out our video channel on YouTube which contains new Nessus and SecurityCenter tutorials.
- Tenable Tweets - You can find us on Twitter at http://twitter.com/tenablesecurity where we make product and company announcements, provide Nessus plugin statistics, and more!
- Want to ask questions about Nessus, SecurityCenter, LCE, and PVS and get answers from the experts at Tenable? Join Tenable's Discussion Forum for custom scripts, announcements, and more!
- You can subscribe to the Tenable Network Security Podcast on iTunes!
New & Notable Plugins
Nessus
General
- Novell Messenger Client Detection (Mac OS X)
- Novell Messenger Client Import Command Remote Code Execution
- Apple OS X Profile Manager Device Management Private Interface Managed Device Enumeration
- Eye-Fi Helper < 3.4.23 Directory Traversal
- Stunnel 4.21 - 4.54 Multiple Vulnerabilities
- Google Chrome < 26.0.1410.43 Multiple Vulnerabilities
- MS KB2819682: Security Updates for Microsoft Windows Store Applications
- Viscosity ViscosityHelper Symlink Attack Local Privilege Escalation
- Git Repository Served by Web Server
- Patch Management: Tivoli Endpoint Manager Get Installed Packages
- GD Star Rating Plugin for WordPress export.php Authentication Bypass Information Disclosure
- VMSA-2013-0004 : VMware ESXi security update for third party library
- ISC BIND 9 libdns Regular Expression Handling DoS
- McAfee Vulnerability Manager cert_cn Parameter XSS
Application Detection
Java
Databases
Passive Vulnerability Scanner
SecurityCenter Report Templates
Stories
- Many Amazon S3 cloud storage users are exposing sensitive company secrets
- Windows Hardening Guide
- Digital cameras easily turned into spying devices
- Three reasons you shouldn't neglect your application security
- Got Attitude?
- Thousands of paroled CA sex offenders, felons easily disable GPS monitors
- Brace for more mega-DDoS attacks
Related Articles
Tenable Network Security Podcast Episode 198 - "PCI Discussion Featuring Jeffrey Man"
February 13, 2014<p></p>
Microsoft’s September 2024 Patch Tuesday Addresses 79 CVEs (CVE-2024-43491)
September 10, 2024Microsoft addresses 79 CVEs with seven critical vulnerabilities and four zero-day vulnerabilities, including three that were exploited in the wild.
CVE-2021-20123, CVE-2021-20124: DrayTek Vulnerabilities Discovered by Tenable Research Added to CISA KEV
September 9, 2024With patches out for three years, attackers have set their sights on a pair of vulnerabilities affecting DrayTek VigorConnect.
Cybersecurity Snapshot: RansomHub Group Triggers CISA Warning, While FBI Says North Korean Hackers Are Targeting Crypto Orgs
September 6, 2024Cybersecurity teams must beware of RansomHub, a surging RaaS gang. Plus, North Korea has unleashed sophisticated social-engineering schemes against crypto employees. Meanwhile, a new SANS report stresses the importance of protecting ICS and OT systems. And a Tenable poll sheds light on cloud-native VM. And much more!
- Podcast