Tenable Network Security Podcast Episode 195 - "Critical AND Exploitable"
Announcements
- We're hiring! - Visit the Tenable website for more information about open positions.
- Want to ask questions about Nessus, PVS, SecurityCenter, and LCE, and get answers from the experts at Tenable? Join the Tenable Discussions Forum for custom scripts, announcements, and more!
- You can find links to subscribe to Tenable's podcast feed, YouTube Channel, Twitter, and Facebook accounts at http://www.tenable.com/podcast!
- Detecting the Trojan.POSRAM Malware
- Nessus Compliance Checks for FortiGate Devices
- Nessus 5.2.5 Is Available for Download
Discussion & Highlighted Plugins
- Discovering New Hosts - At a recent presentation, someone asked me how one can detect new hosts. Tenable has many products that work towards detecting new hosts. One can do this passively by monitoring network traffic with PVS, via Nessus by enumerating virtual machines from virtualization servers, and by looking at the logs collected by LCE. How do you pull all this information together and act on it?
- Critical AND Exploitable - Severity rating vulnerabilities is tricky business. How do you rate the risk? The threat? What's the difference? Math aside, there is something to be said for a vulnerability in your environment. One thinks we should fix all of these ASAP, or should we?
- Scanning the ICS Village - Recently, we scanned an entire lab of security products and SCADA devices. The results were impressive. We generated more than 3GB of network traffic, and all scans completed successfully and enumerated several vulnerabilities. While some of the SCADA plugins were written some time ago, they are still very effective at enumerating vulnerabilities against SCADA devices, and even support ModBus. Read the full post.
Nessus
Passive Vulnerability Scanner
Note: Passive Vulnerability Scanner (PVS) is now Nessus Network Monitor. To learn more about this application and its latest capabilities, visit the Nessus Network Monitor web page.
SecurityCenter Apps
Dashboards
Reports
Security News Stories
- Hacking Risk Grows for Outdated ATMs
- Apple's Very Different BYOD Philosophy
- A Walk Through the ICS Village
- HealthCare.gov security -- 'a breach waiting to happen' | Security & Privacy - CNET News
- Microsoft will furnish malware assassin to XP users until mid-2015
- Hacker Turns Mouse Into a Webcam
- Introduction to Anti-Fuzzing: A Defence in Depth Aid | NCC Group
- The Changing Face Of The IT Security Team
Related Articles
Understanding Tenable Plugins
February 28, 2017Are you pluggin’ along looking for vulnerabilities? The heart of Tenable vulnerability detection comes from the individual tests called plugins – simple programs that check for specific flaws. Each pl...
Tenable Delivers LCE 5.0.0
January 24, 2017Tenable is pleased to announce a major update to the Log Correlation Engine® (LCE®), making it easier to scale horizontally to meet growing organizational demands on performance and redundancy. Additi...
GRIZZLY STEPPE Detection with SecurityCenter
January 5, 2017Note: Tenable SecurityCenter is now Tenable.sc. To learn more about this application and its latest capabilities, visit the Tenable.sc web page. Governments and businesses around the world are ...
CVE-2024-4040: CrushFTP Virtual File System (VFS) Sandbox Escape Vulnerability Exploited
April 23, 2024A zero-day vulnerability in CrushFTP was exploited in the wild against multiple U.S. entities prior to fixed versions becoming available as the vendor recommends customers upgrade as soon as possible.
Operational Technology in the DoD: Ensuring a Secure and Efficient Power Grid
April 19, 2024In an evolving threat landscape, the DoD must make sure that its mission-critical operations don’t experience power outages.
Cybersecurity Snapshot: Cyber Agencies Offer Secure AI Tips, while Stanford Issues In-Depth AI Trends Analysis, Including of AI Security
April 19, 2024Check out recommendations for securing AI systems from the Five Eyes cybersecurity agencies. Plus, Stanford University offers a comprehensive review of AI trends. Meanwhile, a new open-source tool aims to simplify SBOM usage. And don’t miss the latest CIS Benchmarks updates. And much more!
- LCE
- Nessus
- Nessus Network Monitor
- Podcast
- SCADA
- Vulnerability Management