Tenable Network Security Podcast Episode 195 - "Critical AND Exploitable"
Announcements
- We're hiring! - Visit the Tenable website for more information about open positions.
- Want to ask questions about Nessus, PVS, SecurityCenter, and LCE, and get answers from the experts at Tenable? Join the Tenable Discussions Forum for custom scripts, announcements, and more!
- You can find links to subscribe to Tenable's podcast feed, YouTube Channel, Twitter, and Facebook accounts at http://www.tenable.com/podcast!
- Detecting the Trojan.POSRAM Malware
- Nessus Compliance Checks for FortiGate Devices
- Nessus 5.2.5 Is Available for Download
Discussion & Highlighted Plugins
- Discovering New Hosts - At a recent presentation, someone asked me how one can detect new hosts. Tenable has many products that work towards detecting new hosts. One can do this passively by monitoring network traffic with PVS, via Nessus by enumerating virtual machines from virtualization servers, and by looking at the logs collected by LCE. How do you pull all this information together and act on it?
- Critical AND Exploitable - Severity rating vulnerabilities is tricky business. How do you rate the risk? The threat? What's the difference? Math aside, there is something to be said for a vulnerability in your environment. One thinks we should fix all of these ASAP, or should we?
- Scanning the ICS Village - Recently, we scanned an entire lab of security products and SCADA devices. The results were impressive. We generated more than 3GB of network traffic, and all scans completed successfully and enumerated several vulnerabilities. While some of the SCADA plugins were written some time ago, they are still very effective at enumerating vulnerabilities against SCADA devices, and even support ModBus. Read the full post.
Nessus
Passive Vulnerability Scanner
Note: Passive Vulnerability Scanner (PVS) is now Nessus Network Monitor. To learn more about this application and its latest capabilities, visit the Nessus Network Monitor web page.
SecurityCenter Apps
Dashboards
Reports
Security News Stories
- Hacking Risk Grows for Outdated ATMs
- Apple's Very Different BYOD Philosophy
- A Walk Through the ICS Village
- HealthCare.gov security -- 'a breach waiting to happen' | Security & Privacy - CNET News
- Microsoft will furnish malware assassin to XP users until mid-2015
- Hacker Turns Mouse Into a Webcam
- Introduction to Anti-Fuzzing: A Defence in Depth Aid | NCC Group
- The Changing Face Of The IT Security Team
Related Articles
Cybersecurity Snapshot: Many Employees Overshare Work Info with AI Tools, Report Finds, as ‘Cybersecurity Awareness Month’ Kicks Off
October 4, 2024Check out the best practices cyber agencies are promoting during Cybersecurity Awareness Month, as a report warns that staffers are feeding confidential info to AI tools. Meanwhile, a study highlights how business decisions can derail OT security. Plus, get the latest on Active Directory security, CISO salary trends and ransomware attacks!
How to Unlock Advanced IoT Visibility for Cyber-Physical Systems
October 1, 2024As the number of IoT devices deployed globally continues to rise, cyber-physical systems and business operations are exposed to greater risk. Improving asset visibility, monitoring and risk management are critical steps to preventing breaches.
Cybersecurity Snapshot: NIST Program Probes AI Cyber and Privacy Risks, as U.S. Gov’t Tackles Automotive IoT Threat from Russia, China
September 27, 2024A new NIST program will revise security frameworks like NIST’s CSF as AI risks intensify. Plus, the U.S. may ban cars with Russian and Chinese IoT components. Meanwhile, the CSA adds AI insights to its zero trust guide. And get the latest on cybersecurity budgets, SBOMs and the Ghost cybercrime platform!
- LCE
- Nessus
- Nessus Network Monitor
- Podcast
- SCADA
- Vulnerability Management