Blog de Tenable
Instantánea de ciberseguridad: Cyber Pros Emerge as Bold AI Adopters, While AI Changes Data Security Game, CSA Reports Say
How to Discover, Analyze and Respond to Threats Faster with Generative AI
Generative AI (GenAI) is being hailed as the most transformative innovation since the rise of the internet. For security, GenAI can revolutionize the field if applied correctly, especially when it comes to threat detection and response. It enhances efficiency and productivity by swiftly processing…
Instantánea de ciberseguridad: Agencia cibernética Cyber Agency Urges Software Vendors To Boost Product Security, While U.S. Gov’t Wants Info on Banks’ AI Use
Check out the NCSC’s call for software vendors to make their products more secure. Plus, why the Treasury Department is looking at how financial institutions are using AI. And the latest on the cybersecurity skills gap in the U.S. ¡Y mucho más!
Microsoft’s June 2024 Patch Tuesday Addresses 49 CVEs
Microsoft addresses 49 CVEs in its June 2024 Patch Tuesday release with one rated as critical and no zero-day or publicly disclosed vulnerabilities. Our counts omitted two CVEs that were not issued by Microsoft, which include CVE-2023-50868 (issued by MITRE) and CVE-2024-29187 (issued by GitHub).
Protección de la carga de trabajo en la nube: la clave para disminuir los riesgos de seguridad en la nube
Más del 80 % de todas las filtraciones implica datos almacenados en la nube y los equipos de seguridad que no utilizan la protección de la carga de trabajo en la nube (CWP) posiblemente nunca se adelanten a los atacantes que desean acceder a la mayor cantidad de datos posible con el mínimo esfuerzo. A single cloud breach is often the most straightforward way into…
CVE-2024-4577: Proof of Concept Available for PHP-CGI Argument Injection Vulnerability
Researchers disclose a critical severity vulnerability affecting PHP installations and provide proof-of-concept exploit code, which could lead to remote code execution.
Instantánea de ciberseguridad: NIST Program Assesses How AI Systems Will Behave in the Real World, While FBI Has Troves of Decryption Keys for LockBit Victims
Check out the new ARIA program from NIST, designed to evaluate if an AI system will be safe and fair once it’s launched. Plus, the FBI offers to help LockBit victims with thousands of decryption keys. In addition, Deloitte finds that boosting cybersecurity is key for generative AI deployment…
Tenable Partners with CISA to Enhance Secure By Design Practices
When CISA called on the world’s leading software manufacturers to sign its Secure by Design pledge, Tenable answered promptly and enthusiastically, becoming part of the first wave of supporters of this landmark initiative. In this blog post, Tenable CSO, Head of Research and President of Public…
Rockwell Automation: Disconnect OT Devices with Public-Facing Internet Access, Patch or Mitigate Logix, FactoryTalk CVEs
An advisory from Rockwell Automation reiterates the importance of disconnecting operational technology devices with public-facing internet access and patching and mitigating systems vulnerable to several flaws.
CVE-2024-4358, CVE-2024-1800: código del exploit disponible para cadena de exploit crítica en progreso de Telerik Report Server
Researchers have released an exploit chain to achieve remote code execution on unpatched instances of Progress Telerik Report Server. Immediate patching is recommended.
Póngase en contacto con nuestro equipo de ventas