Tenable

Tenable acquires Alsid to provide users with a more complete approach to cyber preparedness

February 11, 2021

Tenable announced that it has entered into a definitive agreement to acquire Alsid SAS. Alsid for Active Directory is a Software as a Service (SaaS) solution with an …

February 2021 Patch Tuesday: Microsoft and Adobe fix exploited zero-days

February 9, 2021

On this February 2021 Patch Tuesday: Adobe has fixed a Reader flaw used in limited attacks, as well as delivered security updates for a variety of products, including Acrobat …

A light December 2020 Patch Tuesday for a no-stress end of the year

December 8, 2020

On this December 2020 Patch Tuesday: Microsoft has plugged 58 CVEs Adobe has delivered security updates for Lightroom, Experience Manager, and Prelude, and has announced that …

Critical flaw in SonicWall’s firewalls patched, update quickly! (CVE-2020-5135)

October 16, 2020

Earlier this week SonicWall patched 11 vulnerabilities affecting its Network Security Appliance (NSA). Among those is CVE-2020-5135, a critical stack-based buffer overflow …

Tenable Lumin updates enable orgs to predict which vulnerabilities pose the greatest business risk

October 6, 2020

Tenable announced new Tenable Lumin innovations that empower customers to align business objectives with cybersecurity initiatives. The latest enhancements to the Cyber …

September 2020 Patch Tuesday: Microsoft fixes over 110 CVEs again

September 8, 2020

On this September 2020 Patch Tuesday: Microsoft has plugged 129 security holes, including a critical RCE flaw that could be triggered by sending a specially crafted email to …

Potential Apache Struts 2 RCE flaw fixed, PoCs released

August 17, 2020

Have you already updated your Apache Struts 2 to version 2.5.22, released in November 2019? You might want to, and quickly, as information about a potential RCE vulnerability …

Exploits for vBulletin zero-day released, attacks are ongoing

August 11, 2020

The fix for CVE-2019-16759, a remote code execution vulnerability in vBulletin that was patched in September 2019, is incomplete, security researcher Amir Etemadieh has …

High-profile Twitter accounts hijacked to push Bitcoin scam. How did it happen?

July 16, 2020

The Twittersphere went into overdrive on Wednesday as a bunch of prominent, verified Twitter accounts were hijacked and started promoting a COVID-19 cryptocurrency giveaway …

Critical flaw opens Palo Alto Networks firewalls and VPN appliances to attack, patch ASAP!

June 30, 2020

Palo Alto Networks has patched a critical and easily exploitable vulnerability (CVE-2020-2021) affecting PAN-OS, the custom operating system running on its next generation …

The importance of effective vulnerability remediation prioritization

June 9, 2020

Too many organizations have yet to find a good formula for prioritizing which vulnerabilities should be remediated immediately and which can wait. According to the results of …

Using Cisco IP phones? Fix these critical vulnerabilities

April 16, 2020

Cisco has released another batch of fixes for a number of its products. Among the vulnerabilities fixed are critical flaws affecting a variety of Cisco IP phones and Cisco UCS …