Tenable Network Security Podcast Episode 186 - "Reducing Your Attack Surface (and your heating bill)"

Welcome to the Tenable Network Security Podcast Episode 186

Announcements

Discussion & Highlighted Plugins

  • Detecting Legacy Clients and Application - I was recently using PVS in a lab environment and noticed the wealth of legacy application information it provided me. This is great news for organizations, as you likely have some legacy systems and applications. It may be tough to find these with network scanning, firewalls, and no credentials for the systems. System owners may not be forthcoming either. However, with PVS you can find old versions of Firefox connecting to legacy web applications. The traffic never lies! How can folks leverage this to find their own legacy applications, and what do you do once you sense them?
  • Disable "Stuff" Not In use - I'm a firm believer in reducing your attack surface. I like simple things, and this is a simple thing. If you're not using it, turn it off! Whether it's an entire system, a service, or parts of an application, turn it off. With all the technology in use today, you have to work towards reducing the attack surface in every aspect, including even using firewalls! What got me thinking about this? My new thermostat, a Nest, which it turns out has ZigBee installed by default, but not in use. Do I want attackers messing with my HVAC? No...

New & Notable Plugins

Nessus

Passive Vulnerability Scanner

Vulnerability Detection

SecurityCenter Apps

Dashboards

Reports

Security News Stories

  1. Business RadioX's Results Matter Radio Features Atlanta Businesses and Organizations Serving the Local Community
  2. SAI Global Deploys Tenable Network Security to Combat Security Vulnerabilities and Compliance
  3. Tenable Network Security Names Attley Ng as Asia-Pacific Vice President
  4. AD Zone Transfers as a user
  5. FAA panel: Wi-Fi is safe on planes even during takeoff and landing
  6. 5 Wi-Fi security myths you must abandon now
  7. Symantec takes on one of largest botnets in history
  8. Iran's cyberwarfare czar is allegedly assassinated