Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Josef Weiss

Josef Weiss's picture
Josef Weiss is a Senior Software Engineer at Tenable, and expertly tracks vulnerabilities, threats, and cybersecurity risks and manages processes & dependencies around detecting such events. Josef is also responsible for identifying new or potentially new threats (for example vulnerabilities or malware) and monitoring levels of threat activity. The typical day includes researching and documenting vulnerabilities and cyber-attacks, including techniques being used by responsible parties. This cyber intelligence is used to ensure that Tenable Research reacts appropriately to any new or existing threats. Prior to joining Tenable, Josef’s experience spanned over 19 years in information security. He has worked as a security engineer and architect for the Big 4, several major universities, large healthcare organizations and the telecommunications industry. Josef, who holds many certifications, is a Certified Information Systems Security Professional (CISSP), and a Python programmer.
Blog Post
Friday, September 1, 2017

M alware and ransomware are a big topic these days, especially with the recent releases of WannaCry and Petya variants.Typically, when I read about new malware my first thought is,...

Blog Post
Monday, May 22, 2017

A ccording to the 2017 Verizon Data Breach Investigations Report (DBIR), time to patch plays a critical role in the risk exposure to your network. The DBIR states (page 13)...

Blog Post
Wednesday, May 17, 2017

I am often asked, “How can I be more productive and get better results from my vulnerability scans?” This question could be the result of a failed audit, network outage...

SC Dashboard
Wednesday, March 22, 2017

A critical element in understanding OpenSSL risks is the identification of the installed OpenSSL applications, libraries, and versions within an organization's environment. OpenSSL is a commonly used open source toolkit and cryptographic library for the Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols. This dashboard allows analysts to understand which OpenSSL versions and vulnerabilities have been detected and better prioritize OpenSSL patching efforts.

Blog Post
Tuesday, March 7, 2017

V ulnerabilities within network services may result in data loss, denial of services, or allow attackers to facilitate attacks against other devices. Checking for insecure or non-essential services is critical...

SC Dashboard
Tuesday, November 15, 2016

Establishing and monitoring areas such as user awareness, access control, and data leakage are critical tasks in maintaining a secure environment. The APRA and the associated PPG aims to assist regulated institutions by outlining prudent practices that can aid in managing security risks within specific elements of their business. This dashboard covers key concepts within the PPG CPG 234 guide on user awareness and access control, addressing topics such as access control and data and information leakage.

SC Dashboard
Monday, November 14, 2016

Establishing and monitoring security controls, defences, ongoing compliance, and assessment of effectiveness are critical tasks in the detection and remediation of vulnerabilities, which could lead to data leakage. The APRA and the associated PPG aims to assist regulated institutions by outlining prudent practices that can aid in managing security risks within specific elements of their business. This dashboard covers key concepts within the PPG CPG 234 guide on overarching framework, addressing topics such as security controls, defence in depth, ongoing compliance, and assessment of effectiveness.

SC Report Template
Thursday, November 3, 2016

Misconfigured or vulnerable media player applications may be exploited, providing an entry point for attackers. Breaches and loss of data can be costly, both financially and in terms of reputation for an organization. This report enumerates vulnerabilities in known media players, such as Apple QuickTime, Adobe Director, and RealNetworks RealPlayer, which can assist analysts in strengthening existing IT management policies.

SC Dashboard
Wednesday, November 2, 2016

Misconfigured or vulnerable media player applications may be exploited, providing an entry point for attackers. Breaches and loss of data can be costly, both financially and in terms of reputation for an organization. This dashboard enumerates vulnerabilities in known media players, such as Apple QuickTime, Adobe Director, and RealNetworks RealPlayer, which can assist analysts in strengthening existing IT management policies.

SC Report Template
Tuesday, October 25, 2016

Misconfigured or vulnerable network services may be exploited, providing an entry point for attackers. Breaches and loss of data can be costly, both financially and in terms of reputation for an organization. This report enumerates known network services, such as Apple Bonjour, Cisco NetFlow, and Samba, displaying vulnerability data to assist analysts in enforcing and verifying IT management policies.

Pages

Try for Free Buy Now

Try Tenable.io

FREE FOR 30 DAYS

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Sign up now.

Buy Tenable.io

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.

65 assets

Choose Your Subscription Option:

Buy Now
Try for Free Buy Now

Try Nessus Professional Free

FREE FOR 7 DAYS

Nessus® is the most comprehensive vulnerability scanner on the market today. Nessus Professional will help automate the vulnerability scanning process, save time in your compliance cycles and allow you to engage your IT team.

Buy Nessus Professional

Nessus® is the most comprehensive vulnerability scanner on the market today. Nessus Professional will help automate the vulnerability scanning process, save time in your compliance cycles and allow you to engage your IT team.

Buy a multi-year license and save. Add Advanced Support for access to phone, community and chat support 24 hours a day, 365 days a year. Full details here.

Try for Free Buy Now

Try Tenable.io Web Application Scanning

FREE FOR 30 DAYS

Enjoy full access to our latest web application scanning offering designed for modern applications as part of the Tenable.io platform. Safely scan your entire online portfolio for vulnerabilities with a high degree of accuracy without heavy manual effort or disruption to critical web applications. Sign up now.

Buy Tenable.io Web Application Scanning

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.

5 FQDNs

$3,578

Buy Now

Try for Free Contact Sales

Try Tenable.io Container Security

FREE FOR 30 DAYS

Enjoy full access to the only container security offering integrated into a vulnerability management platform. Monitor container images for vulnerabilities, malware and policy violations. Integrate with continuous integration and continuous deployment (CI/CD) systems to support DevOps practices, strengthen security and support enterprise policy compliance.

Buy Tenable.io Container Security

Tenable.io Container Security seamlessly and securely enables DevOps processes by providing visibility into the security of container images – including vulnerabilities, malware and policy violations – through integration with the build process.

Get a Demo of Tenable.sc

Please fill out the form below with your contact information and a sales representative will contact you shortly to schedule a demo. You may also include a short comment (limited to 255 characters). Please note that fields with asterisks (*) are mandatory.

Try for Free Contact Sales

Try Tenable Lumin

FREE FOR 30 DAYS

Visualize and explore your Cyber Exposure, track risk reduction over time and benchmark against your peers with Tenable Lumin.

Buy Tenable Lumin

Contact a Sales Representative to see how Lumin can help you gain insight across your entire organization and manage cyber risk.

Request a demo of Tenable.ot

Get the Operational Technology Security You Need.
Reduce the Risk You Don’t.