Tenable Blog

A global team of researchers at Tenable investigates the latest vulnerabilities and industry standards to make sure our product dashboards offer the most current and relevant data for our users. Here’s a look at what it’s like to work on the Dashboard and Report Content (DARC) team. 

We’re pleased to announce Nessus Professional v7. More than 20,000 organizations today use Nessus Professional and there are more than a million and a half Nessus users worldwide. You, the Nessus community, have made Nessus one of the most important and trusted solutions in the industry.

Over nearly 20 years, Nessus has become the gold standard for security practitioners and consultants who want fast and accurate point-in-time scans. Starting with version 7, we are intensifying our focus on performance and accuracy, so you can get the job done even faster and more confidently.

Yesterday, Tenable™ released two plugins to detect macOS High Sierra installs which allow a local user to login as root without a password after several login attempts. Both plugins require authentication, however, there was one scenario where a user could log in over VNC protocol with the root account and no password if screen sharing was enabled. Today, we are releasing a plugin to remotely detect the vulnerability without authentication.

Organizations are continuously leveraging new data and information capabilities to accelerate their business processes and deliver greater value to customers. As a result, industries such as energy, utilities, and manufacturing are becoming increasingly digital and connected. But with new technology come new challenges.

Empire is a popular open source post-exploitation framework. The framework can very roughly be broken down into two parts: agents and listeners. An agent is an implant that lives on the victim’s computer. A listener resides on the attacker’s command and control server and handles communication with the agent. A lot of work has gone into making agents difficult to find. Less has been done to hide listeners.