CVE-2021-44228: Proof-of-Concept for Critical Apache Log4j Remote Code Execution Vulnerability Available (Log4Shell)
Critical vulnerability in the popular logging library, Log4j 2, impacts a number of services and applications, including Minecraft, Steam and Apple iCloud. Attackers have begun actively scanning for and attempting to exploit the flaw.
SonicWall Urges Users to Patch Several Vulnerabilities in Secure Mobile Access Products (CVE-2021-20038)
SonicWall patched eight vulnerabilities in its Secure Mobile Access 100 product line. None have been exploited in the wild, yet, but users are strongly urged to patch. Background On December 7, Soni...
The new offering extends the recently acquired Accurics platform to enable DevSecOps and “shift left security” with integrated controls for development and runtime workflows, focused on Infrastructure as Code (IaC).
ZoHo has released patches for an authentication bypass vulnerability that could lead to remote code execution and has been exploited in the wild. Background On December 3, ZoHo issued a security adv...
When providing cybersecurity in converged IT and operational technology environments, it’s critical for infosec pros to understand the differences between the two and utilize a toolset that delivers a comprehensive picture of both in a single view.
This year for #GivingTuesday, we highlight some of the causes that Tenable employees have championed this year and invite you to do the same.
Fake Bitcoin, Ethereum, Dogecoin, Cardano, Ripple and Shiba Inu Giveaways Proliferate on YouTube Live
Scammers are leveraging compromised YouTube accounts to promote fake cryptocurrency giveaways for Bitcoin, Ethereum, Dogecoin, Cardano, Ripple, Shiba Inu and other cryptocurrencies.
Learn how SSRF flaws arise, why three common attack paths are so challenging to mitigate and how Tenable.io Web Application Scanning can help.
Ask the following four questions to help reduce cyber risk in your public-facing assets and web apps.
Employees at the largest firms are least likely to adhere to wifi and password security guidelines.
Tales Of Zero-Day Disclosure: Tenable Researchers Reveal Recommendations for a Successful Experience
Real life stories of vulnerability discovery and disclosure from Tenable’s Zero Day Research team offer guidance you can use to refine your organization's policies.
Thirteen new vulnerabilities have been discovered in the Nucleus TCP/IP stack used in potentially billions of devices.