Tenable Blog

In today’s security environment, with highly motivated cyber attackers employing increasingly sophisticated techniques to break through commonly deployed defenses, just one skillful intruder can infiltrate your systems with one carefully crafted attack path to a relatively unimportant asset.

In a pioneering cooperative effort, several industry security leaders, including Tenable, have been working on a project led by Novetta Solutions to investigate, report on, and take action against the major threat actor group dubbed “Axiom.” According to Novetta, over the past six years, Axiom’s intelligence-gathering activities have impacted international private organizations primarily in the fields of telecommunications, security, and integrated circuits, and government agencies focusing on aerospace, humanitarian and environmental issues.

Black Hat Europe 2014, a premiere conference on information security, convened in Amsterdam this October. The Tenable EMEA team was there in full force, meeting customers and conversing with other security specialists. Here is a sampling of the Tenable Black Hat perspective.

Vulnerabilities and credibility

By Colin West, Director of Sales Engineering, EMEA

In this October 13, 2014 podcast with Down the Security Rabbithole, Tenable CEO Ron Gula is interviewed by cohosts Rafal Los, James Jardine and Michael Santarcangelo on the subject of Threat and Vulnerability Management. Ron answers the question, “What is a security policy?” He discusses the hurdles to implementing a threat and vulnerability management, the importance of continuous network monitoring, and how to get out of the 1999 security mindset to a more mature security plan. 

Recently, an unusual series of attacks occurred against ATM machines in Malaysia. What makes this set of attacks unusual is that the attackers combined a physical attack against an older Windows XP based model of an NCR ATM machine with a cyber attack against the embedded PC within the machine.