#tenable — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #tenable, aggregated by home.social.
-
Tenable's inside look at code security with Claude Mythos Preview #vulnerabilityscan #tenable https://www.tenable.com/blog/ai-code-security-with-claude-mythos-preview-inside-tenables-500-hours-of-testing-for-project
-
Tenable's inside look at code security with Claude Mythos Preview #vulnerabilityscan #tenable https://www.tenable.com/blog/ai-code-security-with-claude-mythos-preview-inside-tenables-500-hours-of-testing-for-project
-
How Claude Mythos Preview is changing code security at Tenable #vulnerabilityscan #tenable https://www.tenable.com/blog/testing-claude-mythos-preview-for-code-security-tenable
-
How Claude Mythos Preview is changing code security at Tenable #vulnerabilityscan #tenable https://www.tenable.com/blog/testing-claude-mythos-preview-for-code-security-tenable
-
Download pumping turns “popular” apps into malware delivery mechanisms by gaming trust signals in app stores. https://jpmellojr.blogspot.com/2026/07/download-pumping-joins-trust-abuse.html #AppSec #SupplyChainSecurity #npm #infosec #DownloadPumping #Popov #Tenable
-
Download pumping turns “popular” apps into malware delivery mechanisms by gaming trust signals in app stores. https://jpmellojr.blogspot.com/2026/07/download-pumping-joins-trust-abuse.html #AppSec #SupplyChainSecurity #npm #infosec #DownloadPumping #Popov #Tenable
-
Microsoft Patches a Record 570 Security Flaws
https://krebsonsecurity.com/2026/07/microsoft-patches-a-record-570-security-flaws/
#ActiveDirectoryFederationServices #PatchTuesdayJuly2026 #WindowsBitLocker #TheComingStorm #CVE-2026-48561 #CVE-2026-50661 #CVE-2026-56155 #CVE-2026-56164 #MicrosoftCorp. #SecurityTools #PavanDavuluri #SatnamNarang #TimetoPatch #ChrisGoettl #JackBicer #Action1 #Tenable #Ivanti
-
Microsoft Patches a Record 570 Security Flaws
https://krebsonsecurity.com/2026/07/microsoft-patches-a-record-570-security-flaws/
#ActiveDirectoryFederationServices #PatchTuesdayJuly2026 #WindowsBitLocker #TheComingStorm #CVE-2026-48561 #CVE-2026-50661 #CVE-2026-56155 #CVE-2026-56164 #MicrosoftCorp. #SecurityTools #PavanDavuluri #SatnamNarang #TimetoPatch #ChrisGoettl #JackBicer #Action1 #Tenable #Ivanti
-
Is your AI attack surface already exposed? Tenable telemetry says yes. #ai #vulnerabilityscan #tenable https://www.tenable.com/blog/how-much-cyber-risk-does-ai-create-for-organizations-457-million-security-issues-heres-what
-
Is your AI attack surface already exposed? Tenable telemetry says yes. #ai #vulnerabilityscan #tenable https://www.tenable.com/blog/how-much-cyber-risk-does-ai-create-for-organizations-457-million-security-issues-heres-what
-
A Record-Breaking Patch Tuesday for June 2026
https://krebsonsecurity.com/2026/06/a-record-breaking-patch-tuesday-for-june-2026/
#InternetInformationServices #NightmareEclipse #VisualStudioCode #LatestWarnings #TheComingStorm #CVE-2026-45586 #CVE-2026-49160 #CVE-2026-50507 #SecurityTools #SatnamNarang #TimetoPatch #AdamBarnett #GreenPlasma #YellowKey #Tenable #Rapid7
-
A Record-Breaking Patch Tuesday for June 2026
https://krebsonsecurity.com/2026/06/a-record-breaking-patch-tuesday-for-june-2026/
#InternetInformationServices #NightmareEclipse #VisualStudioCode #LatestWarnings #TheComingStorm #CVE-2026-45586 #CVE-2026-49160 #CVE-2026-50507 #SecurityTools #SatnamNarang #TimetoPatch #AdamBarnett #GreenPlasma #YellowKey #Tenable #Rapid7
-
NIST Scales Back NVD CVE Enrichment: What to Know | Tenable #vulnerabilityscan #tenable https://www.tenable.com/blog/nvd-cuts-cve-enrichment-how-tenable-helps
-
NIST Scales Back NVD CVE Enrichment: What to Know | Tenable #vulnerabilityscan #tenable https://www.tenable.com/blog/nvd-cuts-cve-enrichment-how-tenable-helps
-
Tenable Integrates Anthropic's Claude API, Bolstering Vulnerability Management
How does Tenable using Anthropic Claude AI help companies fix security holes? Learn how this May 20 2026 update automates network vulnerability management.
#tenable, #cybersecurity, #anthropic, #claudeai, #networksecurity
https://newsletter.tf/tenable-anthropic-claude-ai-update-may-2026/
-
Tenable now uses Anthropic's Claude AI to find and fix network risks. This is a big change from manual scanning methods used in the past.
#tenable, #cybersecurity, #anthropic, #claudeai, #networksecurity
https://newsletter.tf/tenable-anthropic-claude-ai-update-may-2026/ -
NIST Scales Back NVD CVE Enrichment: What to Know | Tenable #vulnerabilityscan #tenable https://www.tenable.com/blog/nvd-cuts-cve-enrichment-how-tenable-helps
-
NIST Scales Back NVD CVE Enrichment: What to Know | Tenable #vulnerabilityscan #tenable https://www.tenable.com/blog/nvd-cuts-cve-enrichment-how-tenable-helps
-
🛡️ CrowdStrike LogScale CRITICAL vuln (CVE-2026-40050): unauth path traversal — remote file read risk for self-hosted users. Tenable Nessus for Windows: HIGH vuln (CVE-2026-33694), file deletion & privilege escalation. Patch ASAP! https://radar.offseq.com/threat/vulnerabilities-patched-in-crowdstrike-tenable-pro-da7dee84 #OffSeq #Vuln #CrowdStrike #Tenable
-
I'm looking for work in #Barcelona, Spain. I'm a #Linux admin with #RedHat experience and hold #RHCSA & #RHCE certifications. I also have experience with #Splunk, #Tenable, and #VMware sprinkled with some networking knowledge. I also have CompTIA Security+. I won't need sponsorship since my spouse is an EU member. I do not know Spanish well, but learning.
-
I'm looking for work in #Barcelona, Spain. I'm a #Linux admin with #RedHat experience and hold #RHCSA & #RHCE certifications. I also have experience with #Splunk, #Tenable, and #VMware sprinkled with some networking knowledge. I also have CompTIA Security+. I won't need sponsorship since my spouse is an EU member. I do not know Spanish well, but learning.
-
Patch Tuesday, April 2026 Edition
https://krebsonsecurity.com/2026/04/patch-tuesday-april-2026-edition/
#PatchTuesdayApril2026 #SharePointServer #LatestWarnings #TheComingStorm #CVE-2026-32201 #CVE-2026-33120 #CVE-2026-33825 #CVE-2026-34621 #RyanBraunstein #GoogleChrome #SatnamNarang #TimetoPatch #adobereader #MikeWalters #WillDormann #BlueHammer #Action1 #Automox #Tenable
-
Patch Tuesday, April 2026 Edition
https://krebsonsecurity.com/2026/04/patch-tuesday-april-2026-edition/
#PatchTuesdayApril2026 #SharePointServer #LatestWarnings #TheComingStorm #CVE-2026-32201 #CVE-2026-33120 #CVE-2026-33825 #CVE-2026-34621 #RyanBraunstein #GoogleChrome #SatnamNarang #TimetoPatch #adobereader #MikeWalters #WillDormann #BlueHammer #Action1 #Automox #Tenable
-
I'm looking for work in #Barcelona, Spain. I'm a #Linux admin with #RedHat experience and hold #RHCSA & #RHCE certifications. I also have experience with #Splunk, #Tenable, and #VMware sprinkled with some networking knowledge. I also have CompTIA Security+. I won't need sponsorship since my spouse is an EU member. I am learning Catalan in the process.
-
I'm looking for work in #Barcelona, Spain. I'm a #Linux admin with #RedHat experience and hold #RHCSA & #RHCE certifications. I also have experience with #Splunk, #Tenable, and #VMware sprinkled with some networking knowledge. I also have CompTIA Security+. I won't need sponsorship since my spouse is an EU member. I am learning Catalan in the process.
-
The pentest professionals at #usdHeroLab identified a vulnerability in #EntraID during a cloud #pentest that allows the circumvention of conditional access policies for privileged identities.
Two additional vulnerabilities were identified during a web application pentest of #Tenable Nessus Manager, which allow low-privileged users to read arbitrary files at the operating system level.
All #vulnerabilities were reported to the vendors as part of our Responsible Disclosure policy.
🔎 You can find detailed information on the #SecurityAdvisories here: https://www.usd.de/en/security-advisories-entra-id-tenable-nessus-manager/
#SecurityResearch #SecurityAdvisory #moresecurity #NessusManager #Pentesting #Hacking #CVE_2026_3493 #AppSec #InfoSec #CyberSecurity
-
The pentest professionals at #usdHeroLab identified a vulnerability in #EntraID during a cloud #pentest that allows the circumvention of conditional access policies for privileged identities.
Two additional vulnerabilities were identified during a web application pentest of #Tenable Nessus Manager, which allow low-privileged users to read arbitrary files at the operating system level.
All #vulnerabilities were reported to the vendors as part of our Responsible Disclosure policy.
🔎 You can find detailed information on the #SecurityAdvisories here: https://www.usd.de/en/security-advisories-entra-id-tenable-nessus-manager/
#SecurityResearch #SecurityAdvisory #moresecurity #NessusManager #Pentesting #Hacking #CVE_2026_3493 #AppSec #InfoSec #CyberSecurity
-
Microsoft Patch Tuesday, March 2026 Edition
https://krebsonsecurity.com/2026/03/microsoft-patch-tuesday-march-2026-edition/
#MicrosoftPatchTuesdayMarch2026 #MicrosoftOffice #TheComingStorm #CVE-2026-21262 #CVE-2026-24289 #CVE-2026-24291 #CVE-2026-24294 #CVE-2026-25187 #CVE-2026-26110 #CVE-2026-26113 #CVE-2026-26127 #mozillafirefox #SecurityTools #SatnamNarang #TimetoPatch #AdamBarnett #BenMcCarthy #Immersive #Tenable #adobe #XBOW
-
Microsoft Patch Tuesday, March 2026 Edition
https://krebsonsecurity.com/2026/03/microsoft-patch-tuesday-march-2026-edition/
#MicrosoftPatchTuesdayMarch2026 #MicrosoftOffice #TheComingStorm #CVE-2026-21262 #CVE-2026-24289 #CVE-2026-24291 #CVE-2026-24294 #CVE-2026-25187 #CVE-2026-26110 #CVE-2026-26113 #CVE-2026-26127 #mozillafirefox #SecurityTools #SatnamNarang #TimetoPatch #AdamBarnett #BenMcCarthy #Immersive #Tenable #adobe #XBOW
-
Liat Hayun, SVP Product Management at Tenable, on ownership and exposure:
Remove “someone should fix this.”Adopt “I am the only one who will fix this.”
“A vulnerability in a vacuum is just a line of code.”Security teams are drowning in signals. Context defines actionability.
#WomenInCyber #ExposureManagement #SecurityLeadership #LeadHerInSecurity #Tenable
-
🚨 CVE-2026-2630: CRITICAL OS Command Injection in Tenable Security Center (CVSS 9.9). Authenticated attackers can run arbitrary code on the server. Restrict access, monitor logs, and patch ASAP. https://radar.offseq.com/threat/cve-2026-2630-cwe-78-improper-neutralization-of-sp-3ee12498 #OffSeq #Tenable #Vuln
-
----------------
🎯 AI
===================Executive summary: Moltbook, an AI-only social network populated by OpenClaw agents, presents immediate security risks: pervasive spam/scams, exposure of agents to untrusted content via API-oriented prompt files, and a reported database compromise that leaked API keys enabling bot impersonation and direct prompt injection.
Technical details:
• SKILLS.md, HEARTBEAT.md, and MESSAGING.md are repository-style markdown files that describe how agents interact with the Moltbook API. SKILLS.md documents API interactions and recommends HTTP requests (curl-style). HEARTBEAT.md instructs periodic check-ins. MESSAGING.md notes that messaging requires human approval, while other endpoints accept automated agent input.
• Experimental tooling (reported as a CLI tool named moltbotnet) implemented API calls for posting, commenting, upvoting, following, and engagement automation. This tooling demonstrates how easily an agent or impersonator can script interactions.
• Reported breach of Moltbook’s database exposed API keys tied to agent identities. Those keys materially enable: impersonation of legitimate agents, submission of crafted prompts to agent workloads, and direct prompt injection vectors that bypass typical human-only guards.Analysis:
The combination of (1) public, machine-readable prompt files that instruct agents how to behave, (2) open posting and engagement that accepts untrusted content, and (3) leaked credentials produces two classes of injection risks: indirect prompt injection (agents ingesting malicious content from other agents) and direct prompt injection (attacker using stolen API keys to send malicious prompts as a trusted agent). The observed ecosystem is also saturated with social-engineering lures (requests to run package installers, share crypto wallets, or call external APIs).
Detection guidance:
• Monitor unexpected use of API keys or unusual posting frequency associated with agent identities.
• Inspect content sources for scripted patterns (repeated promotional payloads, command-like text referencing package managers or curl usage).Limitations:
• No public CVE identifiers are reported in the source material.
• Exact scope of leaked API keys (number of keys, associated privileges) was not enumerated in the writeup.References and tags:
SKILLS.md, HEARTBEAT.md, MESSAGING.md — Tenable Research field report on Moltbook interactions and breach findings.
🔹 OpenClaw #Moltbook #promptinjection #APIkeys #Tenable
🔗 Source: https://www.tenable.com/blog/undercover-on-moltbook
-
----------------
🎯 AI
===================Executive summary: Moltbook, an AI-only social network populated by OpenClaw agents, presents immediate security risks: pervasive spam/scams, exposure of agents to untrusted content via API-oriented prompt files, and a reported database compromise that leaked API keys enabling bot impersonation and direct prompt injection.
Technical details:
• SKILLS.md, HEARTBEAT.md, and MESSAGING.md are repository-style markdown files that describe how agents interact with the Moltbook API. SKILLS.md documents API interactions and recommends HTTP requests (curl-style). HEARTBEAT.md instructs periodic check-ins. MESSAGING.md notes that messaging requires human approval, while other endpoints accept automated agent input.
• Experimental tooling (reported as a CLI tool named moltbotnet) implemented API calls for posting, commenting, upvoting, following, and engagement automation. This tooling demonstrates how easily an agent or impersonator can script interactions.
• Reported breach of Moltbook’s database exposed API keys tied to agent identities. Those keys materially enable: impersonation of legitimate agents, submission of crafted prompts to agent workloads, and direct prompt injection vectors that bypass typical human-only guards.Analysis:
The combination of (1) public, machine-readable prompt files that instruct agents how to behave, (2) open posting and engagement that accepts untrusted content, and (3) leaked credentials produces two classes of injection risks: indirect prompt injection (agents ingesting malicious content from other agents) and direct prompt injection (attacker using stolen API keys to send malicious prompts as a trusted agent). The observed ecosystem is also saturated with social-engineering lures (requests to run package installers, share crypto wallets, or call external APIs).
Detection guidance:
• Monitor unexpected use of API keys or unusual posting frequency associated with agent identities.
• Inspect content sources for scripted patterns (repeated promotional payloads, command-like text referencing package managers or curl usage).Limitations:
• No public CVE identifiers are reported in the source material.
• Exact scope of leaked API keys (number of keys, associated privileges) was not enumerated in the writeup.References and tags:
SKILLS.md, HEARTBEAT.md, MESSAGING.md — Tenable Research field report on Moltbook interactions and breach findings.
🔹 OpenClaw #Moltbook #promptinjection #APIkeys #Tenable
🔗 Source: https://www.tenable.com/blog/undercover-on-moltbook
-
PoC released for unauthenticated RCE in Trend Micro Apex Central (CVE-2025-69258) https://www.helpnetsecurity.com/2026/01/08/trend-micro-apex-central-cve-2025-69258-rce-poc/ #securityupdate #vulnerability #TrendMicro #Don'tmiss #Hotstuff #Tenable #News #PoC
-
PoC released for unauthenticated RCE in Trend Micro Apex Central (CVE-2025-69258) https://www.helpnetsecurity.com/2026/01/08/trend-micro-apex-central-cve-2025-69258-rce-poc/ #securityupdate #vulnerability #TrendMicro #Don'tmiss #Hotstuff #Tenable #News #PoC
-
Microsoft Patch Tuesday, December 2025 Edition
https://krebsonsecurity.com/2025/12/microsoft-patch-tuesday-december-2025-edition/
#WindowsCloudFilesMiniFilterDriver #WindowsPowershell #MicrosoftOutlook #MicrosoftOffice #LatestWarnings #TheComingStorm #CVE-2025-10573 #CVE-2025-54100 #CVE-2025-59516 #CVE-2025-59517 #CVE-2025-62221 #CVE-2025-62458 #CVE-2025-62470 #CVE-2025-62472 #CVE-2025-62554 #CVE-2025-62557 #CVE-2025-64671 #SatnamNarang #TimetoPatch #AdamBarnett #AriMarzuk #IDEsaster #Tenable
-
Microsoft Patch Tuesday, December 2025 Edition
https://krebsonsecurity.com/2025/12/microsoft-patch-tuesday-december-2025-edition/
#WindowsCloudFilesMiniFilterDriver #WindowsPowershell #MicrosoftOutlook #MicrosoftOffice #LatestWarnings #TheComingStorm #CVE-2025-10573 #CVE-2025-54100 #CVE-2025-59516 #CVE-2025-59517 #CVE-2025-62221 #CVE-2025-62458 #CVE-2025-62470 #CVE-2025-62472 #CVE-2025-62554 #CVE-2025-62557 #CVE-2025-64671 #SatnamNarang #TimetoPatch #AdamBarnett #AriMarzuk #IDEsaster #Tenable
-
Heyyyyy #Tenable #Nessus? Can we maybe not run sketchy-looking #PowerShell on my computer? I just happened to catch this in the logs. Kay, thanks.
-
Heyyyyy #Tenable #Nessus? Can we maybe not run sketchy-looking #PowerShell on my computer? I just happened to catch this in the logs. Kay, thanks.
-
Agentic AI Security: Stop Cyber Hygiene Failures from Becoming a Global Breach | Tenable #ai #breach #vulnerabilityscan #tenable https://www.tenable.com/blog/agentic-ai-security-keep-your-cyber-hygiene-failures-from-becoming-a-global-breach
-
Agentic AI Security: Stop Cyber Hygiene Failures from Becoming a Global Breach | Tenable #ai #breach #vulnerabilityscan #tenable https://www.tenable.com/blog/agentic-ai-security-keep-your-cyber-hygiene-failures-from-becoming-a-global-breach
-
Private data at risk due to seven ChatGPT vulnerabilities | Tenable #vulnerability #vulnerabilities #vulnerabilityscan #tenable https://www.tenable.com/blog/hackedgpt-novel-ai-vulnerabilities-open-the-door-for-private-data-leakage
-
Private data at risk due to seven ChatGPT vulnerabilities | Tenable #vulnerability #vulnerabilities #vulnerabilityscan #tenable https://www.tenable.com/blog/hackedgpt-novel-ai-vulnerabilities-open-the-door-for-private-data-leakage
-
NVD Delays Leave Defenders in the Dark — Early Visibility is Key
Tenable’s recent analysis shows a worrying pattern in vulnerability disclosure timing:
- 63,862 CVEs from 2024–2025
- 56% of PoCs released within 7 days
- NVD lagging by ~15 days
- Exploitation confirmed in as little as 5 days
This gap between CVE assignment, PoC publication, and NVD visibility creates exploitable blind spots for enterprises relying on traditional patch cycles.
💬 Security leaders - how do you bridge these gaps? Do you trust vendor advisories, exploit feeds, or telemetry-driven signals more?👍 Like and follow @technadu for continuous coverage of emerging vulnerability management insights.
#InfoSec #CyberSecurity #VulnerabilityManagement #ThreatIntel #NVD #Exploit #RiskIntel #Tenable #CVEs #CyberDefense #ZeroDay #CVETracking #VulnDisclosure #TechNadu
-
Why prioritizing vulnerabilities based on NVD leaves you at risk | Tenable #vulnerability #vulnerabilities #vulnerabilityscan #tenable https://www.tenable.com/blog/cyber-risk-lurks-in-the-vulnerability-disclosure-gaps
-
Why prioritizing vulnerabilities based on NVD leaves you at risk | Tenable #vulnerability #vulnerabilities #vulnerabilityscan #tenable https://www.tenable.com/blog/cyber-risk-lurks-in-the-vulnerability-disclosure-gaps
-
Microsoft patches three zero-days actively exploited by attackers https://www.helpnetsecurity.com/2025/10/15/microsoft-patch-tuesday-zero-days-cve-2025-24990-cve-2025-59230-cve-2025-47827/ #MicrosoftExchange #PatchTuesday #TrendMicro #Don'tmiss #Immersive #Microsoft #Hotstuff #MSOffice #drivers #Tenable #Windows #0patch #News
-
Microsoft patches three zero-days actively exploited by attackers https://www.helpnetsecurity.com/2025/10/15/microsoft-patch-tuesday-zero-days-cve-2025-24990-cve-2025-59230-cve-2025-47827/ #MicrosoftExchange #PatchTuesday #TrendMicro #Don'tmiss #Immersive #Microsoft #Hotstuff #MSOffice #drivers #Tenable #Windows #0patch #News
-
Patch Tuesday, October 2025 ‘End of 10’ Edition
https://krebsonsecurity.com/2025/10/patch-tuesday-october-2025-end-of-10-edition/
#MicrosoftPatchTuesdayOctober2025 #MicrosoftOffice #CVE-2025-24990 #CVE-2025-59227 #CVE-2025-59230 #CVE-2025-59234 #CVE-2025-59287 #SatnamNarang #TimetoPatch #Immersive #KevBreen #Tenable
-
Patch Tuesday, October 2025 ‘End of 10’ Edition https://krebsonsecurity.com/2025/10/patch-tuesday-october-2025-end-of-10-edition/ #MicrosoftPatchTuesdayOctober2025 #MicrosoftOffice #CVE-2025-24990 #CVE-2025-59227 #CVE-2025-59230 #CVE-2025-59234 #CVE-2025-59287 #SatnamNarang #TimetoPatch #Immersive #KevBreen #Tenable
-
Microsoft, Adobe, SAP deliver critical fixes for September 2025 Patch Tuesday https://www.helpnetsecurity.com/2025/09/10/microsoft-adobe-sap-deliver-critical-fixes-for-september-2025-patch-tuesday/ #AdobeColdFusion #securityupdate #vulnerability #PatchTuesday #TrendMicro #Don'tmiss #Immersive #Hotstuff #Magento #Tenable #Sansec #Adobe #News #SAP
-
Microsoft Patch Tuesday, September 2025 Edition
https://krebsonsecurity.com/2025/09/microsoft-patch-tuesday-september-2025-edition/
#sansinternetstormcenter #LatestWarnings #TheComingStorm #CVE-2025-38352 #CVE-2025-48543 #CVE-2025-54916 #CVE-2025-54918 #CVE-2025-55177 #CVE-2025-55234 #NTLANManager #SatnamNarang #TimetoPatch #WindowsNTLM #Immersive #microsoft #KevBreen #WhatsApp #Tenable #windows #google #apple
-
Microsoft Patch Tuesday, September 2025 Edition https://krebsonsecurity.com/2025/09/microsoft-patch-tuesday-september-2025-edition/ #sansinternetstormcenter #LatestWarnings #TheComingStorm #CVE-2025-38352 #CVE-2025-48543 #CVE-2025-54916 #CVE-2025-54918 #CVE-2025-55177 #CVE-2025-55234 #NTLANManager #SatnamNarang #TimetoPatch #WindowsNTLM #Immersive #microsoft #KevBreen #WhatsApp #Tenable #windows #google #apple
-
Attackers test the limits of railway cybersecurity https://www.helpnetsecurity.com/2025/09/09/railway-systems-cybersecurity/ #Artificialintelligence #criticalinfrastructure #digitaltransformation #cybersecurity #GoogleCloud #cyberrisk #strategy #Tenable #News