Tenable blog
Microsoft’s March 2025 Patch Tuesday Addresses 56 CVEs (CVE-2025-26633, CVE-2025-24983, CVE-2025-24993)
Tales Of Zero-Day Disclosure: Tenable Researchers Reveal Recommendations for a Successful Experience
Real life stories of vulnerability discovery and disclosure from Tenable’s Zero Day Research team offer guidance you can use to refine your organization's policies....
CISA Directive 22-01: How Tenable Can Help You Find and Fix Known Exploited Vulnerabilities
While U.S. federal agencies are required to remediate the vulnerabilities outlined in the U.S. Cybersecurity and Infrastructure Security Agency's Binding Operational Directive 22-01, any organization would do well to consider prioritizing these flaws as part of their risk-based vulnerability managem...
How to Choose an OT Cybersecurity Solution Vendor
Hint: choose a leader in ICS security....
How Smart Secrets Storage Can Help You Avoid Cloud Security Risks
The not-so-sensitive locations that may tempt you when storing sensitive information — why to avoid them and how....
CISA’s Binding Operational Directive on Managing Unacceptable Risk Vulnerabilities in Federal Enterprises Is Key to Stopping Federal Cyberattacks
Federal agencies should leverage Tenable’s vulnerability priority rating (VPR) to effectively manage the nearly 300 vulnerabilities identified....
Nessus 10.0: Vulnerability Assessment for Today’s Dynamic Environments
New features are designed to offer the portability, efficiency and ease-of-use needed to protect the ever-expanding attack surface....
Active Directory is Now in the Ransomware Crosshairs
A flurry of ransomware operators are now targeting Active Directory (AD) as a core step in the attack path. Understanding the details can help you ensure your AD environment is secure....
TikTok LIVE Scams: Stolen Live Footage Used to Earn TikTok Gifts, Promote Scams to Make Money
Stolen video footage of celebrities, content creators and others is being used by scammers in TikTok LIVE streams to earn TikTok gifts, peddle questionable products and drive users to adult dating websites....
Narrow Focus on CVEs Leaves Organizations Vulnerable to Attacks
CWEs and other vulnerabilities necessitate a single dashboard for complete cyber risk assessment A growing number of cybersecurity professionals have evolved their legacy vulnerability management programs to incorporate prioritizing remediation efforts based on which vulnerabilities pose the ...
