Blog de Tenable
Instantánea de ciberseguridad: AI Security Trails AI Usage, Putting Data at Risk, IBM Warns, as OWASP Tackles Agentic AI App Security

Instantánea de ciberseguridad: Refuerce la seguridad de la gestión de acceso e identidades con las nuevas prácticas recomendadas de CISA/NSA
Learn about a new guide packed with best practices recommendations to improve IAM systems security. Plus, cybersecurity ranks as top criteria for software buyers. Also, guess who’s also worried about ChatGPT? Oh, and do you know what a BISO is? And much more! ...
Navigating Cloud Security: Why Segregating Environments from Dev to Production is so Important
Segregation in cloud environments is important for security — this post explores why and offers best practice tips for acting on it....
Tenable Cyber Watch: Un vistazo a la Estrategia Nacional de Ciberseguridad de los EE. UU., una poderosa tecnología de IA se prepara para el horario de máxima audiencia y más
This week’s edition of the Tenable Cyber Watch unpacks the White House’s National Cybersecurity Strategy and explores how artificial intelligence will help cyber teams with complex attacks. Also covered: Why software vendors should prepare to submit letters of attestation to the GSA. ...
ChatGPT y GPT-4 de OpenAI son utilizados como señuelo en correos electrónicos de phishing, estafas de Twitter para promover tokens de OpenAI falsos
Hoping to cash in on the massive interest around OpenAI’s GPT-4 – ChatGPT’s new multimodal model – scammers have launched phishing campaigns via email and Twitter designed to steal cryptocurrency. Check out how they’re carrying out the scams and how you can avoid becoming a victim....
Instantánea de ciberseguridad: CISA identifica vulnerabilidades en organizaciones de infraestructura crítica que los grupos de ransomware podrían explotar
Learn about CISA’s new program to help critical infrastructure organizations stamp out vulnerabilities associated with ransomware attacks. Plus, a U.S. government advisory with the latest on LockBit 3.0. Also, find out why the U.K.’s cyber agency is warning users about ChatGPT. And much more! ...
El Martes de parches de Microsoft de marzo de 2023 aborda 76 CVE (CVE-2023-23397)
Microsoft addresses 76 CVEs including two zero-days exploited in the wild, one of which was publicly disclosed....
Tenable Cyber Watch: Informe del panorama de las amenazas de 2022 de Tenable, principales riesgos cibernéticos para 2023 y un aumento en el sueldo de arquitectos e ingenieros cibernéticos
This week’s edition of Tenable Cyber Watch unpacks the top eight cybersecurity risks organizations face in 2023. Plus, we talk about the continued threat of unpatched, known vulnerabilities that are still being exploited by threat actors. Finally, we look at a new study that shows salaries are incre...
Instantánea de ciberseguridad: ¿Le parece complejo el MITRE ATT&CK? ¿Necesita ayuda para mapearlo? ¡Existe una aplicación para ello!
Learn about a new tool that streamlines MITRE ATT&CK mapping. Plus, known vulnerabilities remain a major cyber risk – just ask LastPass. Also, discover why SaaS data protection remains difficult. Plus, a look at the U.S. National Cybersecurity Strategy. And much more!...
A New Incentive for Using AWS VPC Endpoints
If you haven’t been using VPC endpoints until now, AWS' two new condition keys should make you consider doing so....