Tenable Network Security Podcast Episode 189 - "Nessus UI v2.0 Released"
Announcements
- We're hiring! - Visit the Tenable website for more information about open positions.
- Check out our video channel on YouTube which contains new Nessus, PVS, and SecurityCenter tutorials.
- Tenable Tweets - You can find us on Twitter at http://twitter.com/tenablesecurity where we make product and company announcements, provide Nessus plugin statistics, and more!
- Want to ask questions about Nessus, PVS, SecurityCenter, and LCE, and get answers from the experts at Tenable? Join the Tenable Discussions Forum for custom scripts, announcements, and more!
- You can subscribe to the Tenable Network Security Podcast on iTunes!
Discussion & Highlighted Plugins
- Nessus UI v2.0 Released - Tenable recently announced a new release of the Nessus vulnerability scanner user interface (UI)! This is a major update which provides several new features and enhancements, including a redesigned UI, usability improvements to enhance scan scheduling, processing, and analysis, and policy creation wizards. Specifically, some of the new UI features include:
- Folders to store scan results: Organize scan results in customized folders, making it easy to locate specific scans and consolidate like vulnerability data.
- Sort hosts by compliance: Compliance status is integrated into your scan results, making it easy to see the compliance check pass/fail ratio and quantities for each host.
- One-click metadata access: Host, plugin, and scan information with recommendation and error notes is now easily accessible from within the scan window, putting relevant details right at your fingertips to aid with scan failure and vulnerability investigations.
Nessus
- Apache mod_fcgid Module < 2.3.9 fcgid_header_bucket_read() Function Heap Buffer Overflow
- Panda AdminSecure Communications Agent < 4.50.0.10 Directory Traversal
- Puppet Enterprise < 3.1.0 Multiple Vulnerabilities
- Novell ZENworks umaninv Information Disclosure
- EMC NetWorker 8.x < 8.0.2.3 Management Console Information Disclosure
- Apache PHP-CGI Remote Code Execution
- Oracle Secure Global Desktop Linux Installation Detection
- Oracle Secure Global Desktop Administration Console Detection
- Oracle Secure Global Desktop ttaauxserv Remote Denial of Service (credentialed check)
- Oracle Secure Global Desktop ttaauxserv Remote Denial of Service (remote check)
Passive Vulnerability Scanner
- Mozilla Thunderbird < 24.1 / 17.0.10 (ESR) Multiple Vulnerabilities
- Mozilla SeaMonkey < 2.22 Multiple Vulnerabilities
- Mozilla Firefox < 25.0 / 24.1 (ESR version) / 17.0.10 (ESR version) Multiple Vulnerabilities
- ISAKMP Server Detection
- ISAKMP Client Detection
- Encapsulating Security Payload (ESP) Session Setup
SecurityCenter Apps
Dashboards
Reports
Security News Stories
- The badBIOS Analysis Is Wrong | RootWyrm's Corner
- Researcher Finds Method to Insert Malicious Firmware Into Currency Validator | Threatpost
- Meet "badBIOS," the mysterious Mac and PC malware that jumps airgaps | Ars Technica
- Healthcare.gov's Coming Security Crackup
- #badBIOS features explained
Related Articles
Study: Tenable Offers Fastest, Broadest Coverage of CISA's KEV Catalog
October 23, 2023Tenable ranked first in multiple vulnerability management categories, including the most comprehensive coverage and quickest detection of CISA's Known Exploited Vulnerabilities, according to a Miercom report commissioned by Tenable.
Tuning Network Assessments for Performance and Resource Usage
September 13, 2022Using the correct tool for the job and optimizing scanner placement will have a large impact on scan efficiency with Nessus, Tenable.io and Tenable.sc.
Terrascan Joins the Nessus Community, Enabling Nessus To Validate Modern Cloud Infrastructures
May 17, 2022The addition of Terrascan to the Nessus family of products helps users better secure cloud native infrastructure by identifying misconfigurations, security weaknesses, and policy violations by scanning Infrastructure as Code repositories.
CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
August 14, 2024Ivanti released a patch for a critical severity authentication bypass vulnerability and a warning that exploit code is publicly available
Microsoft’s August 2024 Patch Tuesday Addresses 88 CVEs
August 13, 2024Microsoft addresses 88 CVEs with seven critical vulnerabilities and 10 zero-day vulnerabilities, six of which were exploited in the wild.
Compromising Microsoft's AI Healthcare Chatbot Service
August 13, 2024Tenable Research discovered multiple privilege-escalation issues in the Azure Health Bot Service via a server-side request forgery (SSRF), which allowed researchers access to cross-tenant resources.
- Nessus
- Podcast