Blog de Tenable
The Trifecta: How Three New Gemini Vulnerabilities in Cloud Assist, Search Model, and Browsing Allowed Private Data Exfiltration

CVE-2024-0204: Vulnerabilidad de evasión de autenticación de Fortra GoAnywhere MFT
Proof-of-concept exploit details are available for a newly disclosed critical vulnerability in Fortra GoAnywhere Managed File Transfer (MFT), a product historically targeted by ransomware
CVE-2023-22527: Vulnerabilidad de inyección explotada en la realidad en Atlassian Confluence Data Center and Server Template
In the wild exploitation has begun for a recently disclosed, critical severity flaw in Atlassian Confluence Data Center and Server
Suba de nivel su estrategia de seguridad en la nube
Learn how to better your cloud security program with these ten security resolutions.
Instantánea de ciberseguridad: Critical Infrastructure Orgs Cautioned About Chinese Drones, While Water Plants Advised To Boost Incident Response
Find out why Uncle Sam is warning critical infrastructure facilities about drones made in China, while urging water treatment plants to beef up incident response plans. Plus, the challenges stressing out CISOs are also opening new doors for them. In addition, the latest on the Androxgh0st malware…
Aproveche sus registros internos para mejorar su detección de anomalías y su respuesta ante incidentes
Tenable Cloud Security enriches cloud activity log data to give you the context you need to quickly respond to and remediate cloud risks.
Tenable Cloud Security Now Supports the Generation of Pull Requests for Remediation Suggestions
The new capability is designed to make it more efficient for security teams to pass remediation recommendations on to the infrastructure team to implement. Here’s how it works.
La actualización de parche crítico de Oracle para enero de 2024 aborda 191 CVE
Oracle addresses 191 CVEs in its first quarterly update of 2024 with 389 patches, including 37 critical updates.
CVE-2023-6548, CVE-2023-6549: vulnerabilidades de día cero explotadas en Citrix NetScaler ADC y NetScaler Gateway
Two zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway have been exploited in the wild. Urgent patching is required to address these flaws.
Más allá del horizonte: Las 5 principales tendencias de seguridad en la nube para observar en 2024
La IA generativa sin duda impulsará las capacidades de ciberseguridad de las organizaciones. Sin embargo, los departamentos de ciberseguridad obtendrán pocos beneficios de la IA generativa sin primero aplicar principios sólidos de seguridad en la nube. In this blog, we explain the top cloud security trends that organizations must track –…