#tenable — Public Fediverse posts

Tenable's inside look at code security with Claude Mythos Preview #vulnerabilityscan #tenable https://www.tenable.com/blog/ai-code-security-with-claude-mythos-preview-inside-tenables-500-hours-of-testing-for-project

Tenable's inside look at code security with Claude Mythos Preview #vulnerabilityscan #tenable https://www.tenable.com/blog/ai-code-security-with-claude-mythos-preview-inside-tenables-500-hours-of-testing-for-project

How Claude Mythos Preview is changing code security at Tenable #vulnerabilityscan #tenable https://www.tenable.com/blog/testing-claude-mythos-preview-for-code-security-tenable

How Claude Mythos Preview is changing code security at Tenable #vulnerabilityscan #tenable https://www.tenable.com/blog/testing-claude-mythos-preview-for-code-security-tenable

Download pumping turns “popular” apps into malware delivery mechanisms by gaming trust signals in app stores. https://jpmellojr.blogspot.com/2026/07/download-pumping-joins-trust-abuse.html #AppSec #SupplyChainSecurity #npm #infosec #DownloadPumping #Popov #Tenable

Download pumping turns “popular” apps into malware delivery mechanisms by gaming trust signals in app stores. https://jpmellojr.blogspot.com/2026/07/download-pumping-joins-trust-abuse.html #AppSec #SupplyChainSecurity #npm #infosec #DownloadPumping #Popov #Tenable

Microsoft Patches a Record 570 Security Flaws

https://krebsonsecurity.com/2026/07/microsoft-patches-a-record-570-security-flaws/

#ActiveDirectoryFederationServices #PatchTuesdayJuly2026 #WindowsBitLocker #TheComingStorm #CVE-2026-48561 #CVE-2026-50661 #CVE-2026-56155 #CVE-2026-56164 #MicrosoftCorp. #SecurityTools #PavanDavuluri #SatnamNarang #TimetoPatch #ChrisGoettl #JackBicer #Action1 #Tenable #Ivanti

Microsoft Patches a Record 570 Security Flaws

https://krebsonsecurity.com/2026/07/microsoft-patches-a-record-570-security-flaws/

#ActiveDirectoryFederationServices #PatchTuesdayJuly2026 #WindowsBitLocker #TheComingStorm #CVE-2026-48561 #CVE-2026-50661 #CVE-2026-56155 #CVE-2026-56164 #MicrosoftCorp. #SecurityTools #PavanDavuluri #SatnamNarang #TimetoPatch #ChrisGoettl #JackBicer #Action1 #Tenable #Ivanti

Is your AI attack surface already exposed? Tenable telemetry says yes. #ai #vulnerabilityscan #tenable https://www.tenable.com/blog/how-much-cyber-risk-does-ai-create-for-organizations-457-million-security-issues-heres-what

Is your AI attack surface already exposed? Tenable telemetry says yes. #ai #vulnerabilityscan #tenable https://www.tenable.com/blog/how-much-cyber-risk-does-ai-create-for-organizations-457-million-security-issues-heres-what

A Record-Breaking Patch Tuesday for June 2026

https://krebsonsecurity.com/2026/06/a-record-breaking-patch-tuesday-for-june-2026/

#InternetInformationServices #NightmareEclipse #VisualStudioCode #LatestWarnings #TheComingStorm #CVE-2026-45586 #CVE-2026-49160 #CVE-2026-50507 #SecurityTools #SatnamNarang #TimetoPatch #AdamBarnett #GreenPlasma #YellowKey #Tenable #Rapid7

A Record-Breaking Patch Tuesday for June 2026

https://krebsonsecurity.com/2026/06/a-record-breaking-patch-tuesday-for-june-2026/

#InternetInformationServices #NightmareEclipse #VisualStudioCode #LatestWarnings #TheComingStorm #CVE-2026-45586 #CVE-2026-49160 #CVE-2026-50507 #SecurityTools #SatnamNarang #TimetoPatch #AdamBarnett #GreenPlasma #YellowKey #Tenable #Rapid7

NIST Scales Back NVD CVE Enrichment: What to Know | Tenable #vulnerabilityscan #tenable https://www.tenable.com/blog/nvd-cuts-cve-enrichment-how-tenable-helps

NIST Scales Back NVD CVE Enrichment: What to Know | Tenable #vulnerabilityscan #tenable https://www.tenable.com/blog/nvd-cuts-cve-enrichment-how-tenable-helps

Tenable Integrates Anthropic's Claude API, Bolstering Vulnerability Management

How does Tenable using Anthropic Claude AI help companies fix security holes? Learn how this May 20 2026 update automates network vulnerability management.

#tenable, #cybersecurity, #anthropic, #claudeai, #networksecurity

https://newsletter.tf/tenable-anthropic-claude-ai-update-may-2026/

Tenable now uses Anthropic's Claude AI to find and fix network risks. This is a big change from manual scanning methods used in the past.

#tenable, #cybersecurity, #anthropic, #claudeai, #networksecurity
https://newsletter.tf/tenable-anthropic-claude-ai-update-may-2026/

NIST Scales Back NVD CVE Enrichment: What to Know | Tenable #vulnerabilityscan #tenable https://www.tenable.com/blog/nvd-cuts-cve-enrichment-how-tenable-helps

NIST Scales Back NVD CVE Enrichment: What to Know | Tenable #vulnerabilityscan #tenable https://www.tenable.com/blog/nvd-cuts-cve-enrichment-how-tenable-helps

🛡️ CrowdStrike LogScale CRITICAL vuln (CVE-2026-40050): unauth path traversal — remote file read risk for self-hosted users. Tenable Nessus for Windows: HIGH vuln (CVE-2026-33694), file deletion & privilege escalation. Patch ASAP! https://radar.offseq.com/threat/vulnerabilities-patched-in-crowdstrike-tenable-pro-da7dee84 #OffSeq #Vuln #CrowdStrike #Tenable

I'm looking for work in #Barcelona, Spain. I'm a #Linux admin with #RedHat experience and hold #RHCSA & #RHCE certifications. I also have experience with #Splunk, #Tenable, and #VMware sprinkled with some networking knowledge. I also have CompTIA Security+. I won't need sponsorship since my spouse is an EU member. I do not know Spanish well, but learning.

#FediHire #GetFediHired #openforwork

I'm looking for work in #Barcelona, Spain. I'm a #Linux admin with #RedHat experience and hold #RHCSA & #RHCE certifications. I also have experience with #Splunk, #Tenable, and #VMware sprinkled with some networking knowledge. I also have CompTIA Security+. I won't need sponsorship since my spouse is an EU member. I do not know Spanish well, but learning.

#FediHire #GetFediHired #openforwork

Patch Tuesday, April 2026 Edition

https://krebsonsecurity.com/2026/04/patch-tuesday-april-2026-edition/

#PatchTuesdayApril2026 #SharePointServer #LatestWarnings #TheComingStorm #CVE-2026-32201 #CVE-2026-33120 #CVE-2026-33825 #CVE-2026-34621 #RyanBraunstein #GoogleChrome #SatnamNarang #TimetoPatch #adobereader #MikeWalters #WillDormann #BlueHammer #Action1 #Automox #Tenable

Patch Tuesday, April 2026 Edition

https://krebsonsecurity.com/2026/04/patch-tuesday-april-2026-edition/

#PatchTuesdayApril2026 #SharePointServer #LatestWarnings #TheComingStorm #CVE-2026-32201 #CVE-2026-33120 #CVE-2026-33825 #CVE-2026-34621 #RyanBraunstein #GoogleChrome #SatnamNarang #TimetoPatch #adobereader #MikeWalters #WillDormann #BlueHammer #Action1 #Automox #Tenable

I'm looking for work in #Barcelona, Spain. I'm a #Linux admin with #RedHat experience and hold #RHCSA & #RHCE certifications. I also have experience with #Splunk, #Tenable, and #VMware sprinkled with some networking knowledge. I also have CompTIA Security+. I won't need sponsorship since my spouse is an EU member. I am learning Catalan in the process.

I'm looking for work in #Barcelona, Spain. I'm a #Linux admin with #RedHat experience and hold #RHCSA & #RHCE certifications. I also have experience with #Splunk, #Tenable, and #VMware sprinkled with some networking knowledge. I also have CompTIA Security+. I won't need sponsorship since my spouse is an EU member. I am learning Catalan in the process.

The pentest professionals at #usdHeroLab identified a vulnerability in #EntraID during a cloud #pentest that allows the circumvention of conditional access policies for privileged identities.

Two additional vulnerabilities were identified during a web application pentest of #Tenable Nessus Manager, which allow low-privileged users to read arbitrary files at the operating system level.

All #vulnerabilities were reported to the vendors as part of our Responsible Disclosure policy.

🔎 You can find detailed information on the #SecurityAdvisories here: https://www.usd.de/en/security-advisories-entra-id-tenable-nessus-manager/

#SecurityResearch #SecurityAdvisory #moresecurity #NessusManager #Pentesting #Hacking #CVE_2026_3493 #AppSec #InfoSec #CyberSecurity

The pentest professionals at #usdHeroLab identified a vulnerability in #EntraID during a cloud #pentest that allows the circumvention of conditional access policies for privileged identities.

Two additional vulnerabilities were identified during a web application pentest of #Tenable Nessus Manager, which allow low-privileged users to read arbitrary files at the operating system level.

All #vulnerabilities were reported to the vendors as part of our Responsible Disclosure policy.

🔎 You can find detailed information on the #SecurityAdvisories here: https://www.usd.de/en/security-advisories-entra-id-tenable-nessus-manager/

#SecurityResearch #SecurityAdvisory #moresecurity #NessusManager #Pentesting #Hacking #CVE_2026_3493 #AppSec #InfoSec #CyberSecurity

Microsoft Patch Tuesday, March 2026 Edition

https://krebsonsecurity.com/2026/03/microsoft-patch-tuesday-march-2026-edition/

#MicrosoftPatchTuesdayMarch2026 #MicrosoftOffice #TheComingStorm #CVE-2026-21262 #CVE-2026-24289 #CVE-2026-24291 #CVE-2026-24294 #CVE-2026-25187 #CVE-2026-26110 #CVE-2026-26113 #CVE-2026-26127 #mozillafirefox #SecurityTools #SatnamNarang #TimetoPatch #AdamBarnett #BenMcCarthy #Immersive #Tenable #adobe #XBOW

Microsoft Patch Tuesday, March 2026 Edition

https://krebsonsecurity.com/2026/03/microsoft-patch-tuesday-march-2026-edition/

#MicrosoftPatchTuesdayMarch2026 #MicrosoftOffice #TheComingStorm #CVE-2026-21262 #CVE-2026-24289 #CVE-2026-24291 #CVE-2026-24294 #CVE-2026-25187 #CVE-2026-26110 #CVE-2026-26113 #CVE-2026-26127 #mozillafirefox #SecurityTools #SatnamNarang #TimetoPatch #AdamBarnett #BenMcCarthy #Immersive #Tenable #adobe #XBOW

Liat Hayun, SVP Product Management at Tenable, on ownership and exposure:
Remove “someone should fix this.”

Adopt “I am the only one who will fix this.”
“A vulnerability in a vacuum is just a line of code.”

Security teams are drowning in signals. Context defines actionability.

Read: https://www.technadu.com/from-national-security-to-enterprise-risk-turning-data-into-decisions-and-proving-excellence-has-no-gender/621106/

#WomenInCyber #ExposureManagement #SecurityLeadership #LeadHerInSecurity #Tenable

🚨 CVE-2026-2630: CRITICAL OS Command Injection in Tenable Security Center (CVSS 9.9). Authenticated attackers can run arbitrary code on the server. Restrict access, monitor logs, and patch ASAP. https://radar.offseq.com/threat/cve-2026-2630-cwe-78-improper-neutralization-of-sp-3ee12498 #OffSeq #Tenable #Vuln

----------------

🎯 AI
===================

Executive summary: Moltbook, an AI-only social network populated by OpenClaw agents, presents immediate security risks: pervasive spam/scams, exposure of agents to untrusted content via API-oriented prompt files, and a reported database compromise that leaked API keys enabling bot impersonation and direct prompt injection.

Technical details:
• SKILLS.md, HEARTBEAT.md, and MESSAGING.md are repository-style markdown files that describe how agents interact with the Moltbook API. SKILLS.md documents API interactions and recommends HTTP requests (curl-style). HEARTBEAT.md instructs periodic check-ins. MESSAGING.md notes that messaging requires human approval, while other endpoints accept automated agent input.
• Experimental tooling (reported as a CLI tool named moltbotnet) implemented API calls for posting, commenting, upvoting, following, and engagement automation. This tooling demonstrates how easily an agent or impersonator can script interactions.
• Reported breach of Moltbook’s database exposed API keys tied to agent identities. Those keys materially enable: impersonation of legitimate agents, submission of crafted prompts to agent workloads, and direct prompt injection vectors that bypass typical human-only guards.

Analysis:

The combination of (1) public, machine-readable prompt files that instruct agents how to behave, (2) open posting and engagement that accepts untrusted content, and (3) leaked credentials produces two classes of injection risks: indirect prompt injection (agents ingesting malicious content from other agents) and direct prompt injection (attacker using stolen API keys to send malicious prompts as a trusted agent). The observed ecosystem is also saturated with social-engineering lures (requests to run package installers, share crypto wallets, or call external APIs).

Detection guidance:
• Monitor unexpected use of API keys or unusual posting frequency associated with agent identities.
• Inspect content sources for scripted patterns (repeated promotional payloads, command-like text referencing package managers or curl usage).

Limitations:
• No public CVE identifiers are reported in the source material.
• Exact scope of leaked API keys (number of keys, associated privileges) was not enumerated in the writeup.

References and tags:

SKILLS.md, HEARTBEAT.md, MESSAGING.md — Tenable Research field report on Moltbook interactions and breach findings.

🔹 OpenClaw #Moltbook #promptinjection #APIkeys #Tenable

🔗 Source: https://www.tenable.com/blog/undercover-on-moltbook

----------------

🎯 AI
===================

Executive summary: Moltbook, an AI-only social network populated by OpenClaw agents, presents immediate security risks: pervasive spam/scams, exposure of agents to untrusted content via API-oriented prompt files, and a reported database compromise that leaked API keys enabling bot impersonation and direct prompt injection.

Technical details:
• SKILLS.md, HEARTBEAT.md, and MESSAGING.md are repository-style markdown files that describe how agents interact with the Moltbook API. SKILLS.md documents API interactions and recommends HTTP requests (curl-style). HEARTBEAT.md instructs periodic check-ins. MESSAGING.md notes that messaging requires human approval, while other endpoints accept automated agent input.
• Experimental tooling (reported as a CLI tool named moltbotnet) implemented API calls for posting, commenting, upvoting, following, and engagement automation. This tooling demonstrates how easily an agent or impersonator can script interactions.
• Reported breach of Moltbook’s database exposed API keys tied to agent identities. Those keys materially enable: impersonation of legitimate agents, submission of crafted prompts to agent workloads, and direct prompt injection vectors that bypass typical human-only guards.

Analysis:

The combination of (1) public, machine-readable prompt files that instruct agents how to behave, (2) open posting and engagement that accepts untrusted content, and (3) leaked credentials produces two classes of injection risks: indirect prompt injection (agents ingesting malicious content from other agents) and direct prompt injection (attacker using stolen API keys to send malicious prompts as a trusted agent). The observed ecosystem is also saturated with social-engineering lures (requests to run package installers, share crypto wallets, or call external APIs).

Detection guidance:
• Monitor unexpected use of API keys or unusual posting frequency associated with agent identities.
• Inspect content sources for scripted patterns (repeated promotional payloads, command-like text referencing package managers or curl usage).

Limitations:
• No public CVE identifiers are reported in the source material.
• Exact scope of leaked API keys (number of keys, associated privileges) was not enumerated in the writeup.

References and tags:

SKILLS.md, HEARTBEAT.md, MESSAGING.md — Tenable Research field report on Moltbook interactions and breach findings.

🔹 OpenClaw #Moltbook #promptinjection #APIkeys #Tenable

🔗 Source: https://www.tenable.com/blog/undercover-on-moltbook

PoC released for unauthenticated RCE in Trend Micro Apex Central (CVE-2025-69258) https://www.helpnetsecurity.com/2026/01/08/trend-micro-apex-central-cve-2025-69258-rce-poc/ #securityupdate #vulnerability #TrendMicro #Don'tmiss #Hotstuff #Tenable #News #PoC

PoC released for unauthenticated RCE in Trend Micro Apex Central (CVE-2025-69258) https://www.helpnetsecurity.com/2026/01/08/trend-micro-apex-central-cve-2025-69258-rce-poc/ #securityupdate #vulnerability #TrendMicro #Don'tmiss #Hotstuff #Tenable #News #PoC

Microsoft Patch Tuesday, December 2025 Edition

https://krebsonsecurity.com/2025/12/microsoft-patch-tuesday-december-2025-edition/

#WindowsCloudFilesMiniFilterDriver #WindowsPowershell #MicrosoftOutlook #MicrosoftOffice #LatestWarnings #TheComingStorm #CVE-2025-10573 #CVE-2025-54100 #CVE-2025-59516 #CVE-2025-59517 #CVE-2025-62221 #CVE-2025-62458 #CVE-2025-62470 #CVE-2025-62472 #CVE-2025-62554 #CVE-2025-62557 #CVE-2025-64671 #SatnamNarang #TimetoPatch #AdamBarnett #AriMarzuk #IDEsaster #Tenable

Microsoft Patch Tuesday, December 2025 Edition

https://krebsonsecurity.com/2025/12/microsoft-patch-tuesday-december-2025-edition/

#WindowsCloudFilesMiniFilterDriver #WindowsPowershell #MicrosoftOutlook #MicrosoftOffice #LatestWarnings #TheComingStorm #CVE-2025-10573 #CVE-2025-54100 #CVE-2025-59516 #CVE-2025-59517 #CVE-2025-62221 #CVE-2025-62458 #CVE-2025-62470 #CVE-2025-62472 #CVE-2025-62554 #CVE-2025-62557 #CVE-2025-64671 #SatnamNarang #TimetoPatch #AdamBarnett #AriMarzuk #IDEsaster #Tenable

Heyyyyy #Tenable #Nessus? Can we maybe not run sketchy-looking #PowerShell on my computer? I just happened to catch this in the logs. Kay, thanks.

Heyyyyy #Tenable #Nessus? Can we maybe not run sketchy-looking #PowerShell on my computer? I just happened to catch this in the logs. Kay, thanks.

Agentic AI Security: Stop Cyber Hygiene Failures from Becoming a Global Breach | Tenable #ai #breach #vulnerabilityscan #tenable https://www.tenable.com/blog/agentic-ai-security-keep-your-cyber-hygiene-failures-from-becoming-a-global-breach

Agentic AI Security: Stop Cyber Hygiene Failures from Becoming a Global Breach | Tenable #ai #breach #vulnerabilityscan #tenable https://www.tenable.com/blog/agentic-ai-security-keep-your-cyber-hygiene-failures-from-becoming-a-global-breach

Private data at risk due to seven ChatGPT vulnerabilities | Tenable #vulnerability #vulnerabilities #vulnerabilityscan #tenable https://www.tenable.com/blog/hackedgpt-novel-ai-vulnerabilities-open-the-door-for-private-data-leakage

Private data at risk due to seven ChatGPT vulnerabilities | Tenable #vulnerability #vulnerabilities #vulnerabilityscan #tenable https://www.tenable.com/blog/hackedgpt-novel-ai-vulnerabilities-open-the-door-for-private-data-leakage

NVD Delays Leave Defenders in the Dark — Early Visibility is Key
Tenable’s recent analysis shows a worrying pattern in vulnerability disclosure timing:
- 63,862 CVEs from 2024–2025
- 56% of PoCs released within 7 days
- NVD lagging by ~15 days
- Exploitation confirmed in as little as 5 days
This gap between CVE assignment, PoC publication, and NVD visibility creates exploitable blind spots for enterprises relying on traditional patch cycles.
💬 Security leaders - how do you bridge these gaps? Do you trust vendor advisories, exploit feeds, or telemetry-driven signals more?

👍 Like and follow @technadu for continuous coverage of emerging vulnerability management insights.

#InfoSec #CyberSecurity #VulnerabilityManagement #ThreatIntel #NVD #Exploit #RiskIntel #Tenable #CVEs #CyberDefense #ZeroDay #CVETracking #VulnDisclosure #TechNadu

Why prioritizing vulnerabilities based on NVD leaves you at risk | Tenable #vulnerability #vulnerabilities #vulnerabilityscan #tenable https://www.tenable.com/blog/cyber-risk-lurks-in-the-vulnerability-disclosure-gaps

Why prioritizing vulnerabilities based on NVD leaves you at risk | Tenable #vulnerability #vulnerabilities #vulnerabilityscan #tenable https://www.tenable.com/blog/cyber-risk-lurks-in-the-vulnerability-disclosure-gaps

Microsoft patches three zero-days actively exploited by attackers https://www.helpnetsecurity.com/2025/10/15/microsoft-patch-tuesday-zero-days-cve-2025-24990-cve-2025-59230-cve-2025-47827/ #MicrosoftExchange #PatchTuesday #TrendMicro #Don'tmiss #Immersive #Microsoft #Hotstuff #MSOffice #drivers #Tenable #Windows #0patch #News

Microsoft patches three zero-days actively exploited by attackers https://www.helpnetsecurity.com/2025/10/15/microsoft-patch-tuesday-zero-days-cve-2025-24990-cve-2025-59230-cve-2025-47827/ #MicrosoftExchange #PatchTuesday #TrendMicro #Don'tmiss #Immersive #Microsoft #Hotstuff #MSOffice #drivers #Tenable #Windows #0patch #News

Patch Tuesday, October 2025 ‘End of 10’ Edition

https://krebsonsecurity.com/2025/10/patch-tuesday-october-2025-end-of-10-edition/

#MicrosoftPatchTuesdayOctober2025 #MicrosoftOffice #CVE-2025-24990 #CVE-2025-59227 #CVE-2025-59230 #CVE-2025-59234 #CVE-2025-59287 #SatnamNarang #TimetoPatch #Immersive #KevBreen #Tenable

Patch Tuesday, October 2025 ‘End of 10’ Edition https://krebsonsecurity.com/2025/10/patch-tuesday-october-2025-end-of-10-edition/ #MicrosoftPatchTuesdayOctober2025 #MicrosoftOffice #CVE-2025-24990 #CVE-2025-59227 #CVE-2025-59230 #CVE-2025-59234 #CVE-2025-59287 #SatnamNarang #TimetoPatch #Immersive #KevBreen #Tenable

Microsoft, Adobe, SAP deliver critical fixes for September 2025 Patch Tuesday https://www.helpnetsecurity.com/2025/09/10/microsoft-adobe-sap-deliver-critical-fixes-for-september-2025-patch-tuesday/ #AdobeColdFusion #securityupdate #vulnerability #PatchTuesday #TrendMicro #Don'tmiss #Immersive #Hotstuff #Magento #Tenable #Sansec #Adobe #News #SAP

Microsoft Patch Tuesday, September 2025 Edition

https://krebsonsecurity.com/2025/09/microsoft-patch-tuesday-september-2025-edition/

#sansinternetstormcenter #LatestWarnings #TheComingStorm #CVE-2025-38352 #CVE-2025-48543 #CVE-2025-54916 #CVE-2025-54918 #CVE-2025-55177 #CVE-2025-55234 #NTLANManager #SatnamNarang #TimetoPatch #WindowsNTLM #Immersive #microsoft #KevBreen #WhatsApp #Tenable #windows #google #apple

Microsoft Patch Tuesday, September 2025 Edition https://krebsonsecurity.com/2025/09/microsoft-patch-tuesday-september-2025-edition/ #sansinternetstormcenter #LatestWarnings #TheComingStorm #CVE-2025-38352 #CVE-2025-48543 #CVE-2025-54916 #CVE-2025-54918 #CVE-2025-55177 #CVE-2025-55234 #NTLANManager #SatnamNarang #TimetoPatch #WindowsNTLM #Immersive #microsoft #KevBreen #WhatsApp #Tenable #windows #google #apple

Attackers test the limits of railway cybersecurity https://www.helpnetsecurity.com/2025/09/09/railway-systems-cybersecurity/ #Artificialintelligence #criticalinfrastructure #digitaltransformation #cybersecurity #GoogleCloud #cyberrisk #strategy #Tenable #News