Tenable Network Security Podcast - Episode 2
Welcome to the Tenable Network Security Podcast - Episode 2
Announcements
- New videos on finding Rogue access points and discovering the latest IIS 5 FTP vulnerability uploaded http://tenablesecurity.blip.tv
- The Tenable appliance was announced, featuring immediate support for Nessus & Security Center, and future support for PVS and LCE
- As always be sure to check out our blog at http://blog.tenablesecurity.com
Interview: Marcus Ranum on Zero Day Exploits: Defending Your Network
- If you are speaking to the security professionals responsible for network security, what can you tell them about "0day" exploits that is helpful?
- Does the media over-hype so-called "0Day" exploits?
- Why is that remote exploits garner so much attention, I mean XSS vulnerabilities are found everyday and no one seems to notice, yet find a juicy exploit in a commonly exposed network service and everyone goes bonkers?
- Many people are asking, "Who still uses FTP?". This is a common theme that I see even today, large organizations with mature security architecture using clear-text protocols such as Telnet, FTP, and TFTP, why? What can they do to expedite the usage of secure protocols, or does this even matter?
- What is missing from most organization's security architecture, in your opinion, that would work to thwart "0day" or even the most common exploits?
- How do economics work against us when it comes to 0day exploits? For example, there are companies that will hold on to, and sell, "0day" exploits, and there are others that will buy "0day" exploits and work with the vendors to fix them.
We also interview Dan Philpott from FISMApedia!
Stories
- New Version of the popular Subseven trojan released
- Microsoft Warns Of IIS FTp Flaw - Offers workarounds and cookies (okay, just workarounds)
- Upgraded to Snow Leopard? Time to upgrade Adobe Flash too!
Tenable Events
- Ron Gula will be speaking at the Hacker Halted conference in Miami on September 23, 2009
- Marcus Ranum is speaking at Forrester's Security Forum on September 10, 2009
- Paul Asadoorian and others from Tenable Network Security will be attending Cyber Dawn Cyber Exercise on October 3-4, 2009
Related Articles
Tenable Network Security Podcast Episode 198 - "PCI Discussion Featuring Jeffrey Man"
February 13, 2014<p></p>
Cybersecurity Snapshot: Many Employees Overshare Work Info with AI Tools, Report Finds, as ‘Cybersecurity Awareness Month’ Kicks Off
October 4, 2024Check out the best practices cyber agencies are promoting during Cybersecurity Awareness Month, as a report warns that staffers are feeding confidential info to AI tools. Meanwhile, a study highlights how business decisions can derail OT security. Plus, get the latest on Active Directory security, CISO salary trends and ransomware attacks!
How to Unlock Advanced IoT Visibility for Cyber-Physical Systems
October 1, 2024As the number of IoT devices deployed globally continues to rise, cyber-physical systems and business operations are exposed to greater risk. Improving asset visibility, monitoring and risk management are critical steps to preventing breaches.
Cybersecurity Snapshot: NIST Program Probes AI Cyber and Privacy Risks, as U.S. Gov’t Tackles Automotive IoT Threat from Russia, China
September 27, 2024A new NIST program will revise security frameworks like NIST’s CSF as AI risks intensify. Plus, the U.S. may ban cars with Russian and Chinese IoT components. Meanwhile, the CSA adds AI insights to its zero trust guide. And get the latest on cybersecurity budgets, SBOMs and the Ghost cybercrime platform!
- Podcast