Tenable Network Security Podcast Episode 124 - "OS X Vulnerabilities, Laptop Security at Conferences"
Announcements
- Check out our video channel on YouTube which contains new Nessus and SecurityCenter 4 tutorials.
- We're hiring! - Visit the Tenable website for more information about open positions.
- You can subscribe to the Tenable Network Security Podcast on iTunes!
- Tenable Tweets - You can find us on Twitter at http://twitter.com/tenablesecurity where we make product and company announcements, provide Nessus plugin statistics, and more!
- Want to ask questions about Nessus, SecurityCenter, LCE, and PVS and get answers from the experts at Tenable? Join Tenable's Discussion Forum for custom scripts, announcements, and more!
New & Notable Plugins
Nessus
- Mac OS X Multiple Vulnerabilities for Security Update 2012-002
- OpenSSL Versions Between 1.0.0 and 1.0.0j Denial of Service Vulnerability
- Mac OS X FileVault Plaintext Password Logging
Passive Vulnerability Scanner (PVS)
- PVS and Facebook Game Detection
- HTTP Server Insecure Basic Authentication
- Apple iOS 3.0 through 5.1 Multiple Vulnerabilities
SecurityCenter Report Templates
SecurityCenter Dashboards
Compliance Checks
- A new check to Windows compliance which allows users to check the registry type (e.g., REG_DWORD, REG_SZ). More information about this new feature can be found in the Nessus Compliance Checks Reference Guide.
Stories
- FBI fears BitCoins
- Netgear WNDRMAC 1.0.0.22 Information Disclosure ≈ Packet Storm
- Wonderware Archestra SuiteLink Resource Consumption
- Step on it: Virus could lead to motion-powered gadgets
- Laptops at Security Conferences, (Mon, May 14th)
- From LOW to PWNED [8] Honorable Mention: Log File Injection
- 10 Symptoms Of Check-Box Compliance
Related Articles
Tenable Network Security Podcast Episode 198 - "PCI Discussion Featuring Jeffrey Man"
February 13, 2014<p></p>
CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
August 14, 2024Ivanti released a patch for a critical severity authentication bypass vulnerability and a warning that exploit code is publicly available
Microsoft’s August 2024 Patch Tuesday Addresses 88 CVEs
August 13, 2024Microsoft addresses 88 CVEs with seven critical vulnerabilities and 10 zero-day vulnerabilities, six of which were exploited in the wild.
Compromising Microsoft's AI Healthcare Chatbot Service
August 13, 2024Tenable Research discovered multiple privilege-escalation issues in the Azure Health Bot Service via a server-side request forgery (SSRF), which allowed researchers access to cross-tenant resources.
- Podcast