Tenable Network Security Podcast - Episode 7
Welcome to the Tenable Network Security Podcast - Episode 7
Announcements
- New blog post going up today on the experiences at Cyberdawn, a cyber exercise that puts hackers against defenders in a realistic environment.
- Attention Security Center customers! A new version of Security Center, 3.4.5, has been released and is available for download in the customer support portal (Security Center customers can find the release notes the discussion portal). It includes such improvements as web application scanning support.
- Paul Asadoorian was interviewed on Securabit Episode 40 and discusses all things Nessus and some of the features in our enterprise products such as Security Center and the Passive Vulnerability Scanner (PVS)
- Paul Asadoorian spoke at the Louisville Infosec conference on web application security on October 7, 2009
- As always be sure to check out our blog at http://blog.tenablesecurity.com
Interview: John Bos - Cybrex, LLC
Stories
- Critical Flaw In Adobe Reader (0Day) - Adobe continues to present exploitable vulnerabilities on the client.
- The Importance Of Vulnerability Management - This article references a whitepaper from Dark Reading Room on vulnerability management. It should be clear that Tenable's Nessus vulnerability scanner contains more functionality than remotely assessing vulnerabilities and "exploiting" them. You can also use Nessus to perform patch and configuration audits, as outlined in the blog post "Top 3 Things You Should Know About Nessus"
- Lessons Learned: Vulnerability and Expectations Management - This is a great story, okay maybe not great if you are using a certain Anti-Virus vendors products, on how Nessus helped someone determine that patched systems were indeed still vulnerable.
- Updated FDCC Policies Available - If you are using Nessus, or working to ensure FDCC compliance in your organization, please note there are new policies available based on recent changes to the FDCC standards.
Tenable Events
- Oct 15 - Ron Gula will be participating at the 2009 San Francisco CISO Executive Summit
- October 26-27 - Tenable will be at the Techno Forensics conference in githersburg, MD
- October 26-30 - 5th Annual IT Security Automation Conference in Baltimore, MD
- November 6-7 Dojocon
Related Articles
Tenable Network Security Podcast Episode 198 - "PCI Discussion Featuring Jeffrey Man"
February 13, 2014<p></p>
CloudImposer: Executing Code on Millions of Google Servers with a Single Malicious Package
September 16, 2024Tenable Research discovered a remote code execution (RCE) vulnerability in Google Cloud Platform (GCP) that is now fixed and that we dubbed CloudImposer. The vulnerability could have allowed an attacker to hijack an internal software dependency that Google pre-installs on each Google Cloud Composer pipeline-orchestration tool. Tenable Research also found risky guidance in GCP documentation that customers should be aware of.
Cybersecurity Snapshot: Russia-backed Hackers Aim at Critical Infrastructure Orgs, as Crypto Fraud Balloons
September 13, 2024Critical infrastructure operators must beware of Russian military hacking groups. Plus, cyber scammers are having a field day with crypto fraud. Meanwhile, AI and cloud vendors face stricter reporting regulations in the U.S. And get the latest on AI-model risk management and on cybersecurity understaffing!
Microsoft’s September 2024 Patch Tuesday Addresses 79 CVEs (CVE-2024-43491)
September 10, 2024Microsoft addresses 79 CVEs with seven critical vulnerabilities and four zero-day vulnerabilities, including three that were exploited in the wild.
- Podcast