サイバーセキュリティニュース: AI を活用してサイバーセキュリティ対策強化
More security teams are incorporating AI to uplevel their defense strategies and boost productivity. With so much AI buzz, it may be overwhelming to decipher which tools to acquire and how they fit in a modern security strategy. Read on to explore how AI-enabled tools can help enhance your security ...
IDC で、Tenable が 6 年連続でデバイス脆弱性管理市場シェア世界第 1 位にランクイン
The research firm’s latest report also provides advice for technology suppliers that they can use to improve their vulnerability management strategy....
マイクロソフト 2024 年 10 月月例セキュリティ更新プログラム、117 件の CVE に対応 (CVE-2024-43572、CVE-2024-43573)
Microsoft addresses 117 CVEs with three rated as critical and four zero-day vulnerabilities, two of which were exploited in the wild....
CISA と NSA のクラウド セキュリティのベスト プラクティスの詳細
Recent cloud security guidance from CISA and the NSA offers a wealth of recommendations to help organizations reduce risk. This blog highlights key takeaways, provides further insights from CIS, and explores how utilizing cloud security posture management (CSPM) and cloud-native application protecti...
OT および IT リスクの管理: サイバーセキュリティリーダーが知っておくべきこと
Security leaders face the challenge of managing a vast, interconnected attack surface, where traditional approaches to managing cyber risk are no longer sufficient. Modern threats exploit vulnerabilities across domains, requiring a more holistic approach to avoid operational disruption, safety risks...
サイバーセキュリティニュース: 多くの従業員が AI ツールと業務情報を過剰に共有していることがレポートで判明、「サイバーセキュリティ啓発月間」がキックオフ
Check out the best practices cyber agencies are promoting during Cybersecurity Awareness Month, as a report warns that staffers are feeding confidential info to AI tools. Meanwhile, a study highlights how business decisions can derail OT security. Plus, get the latest on Active Directory security, C...
サイバーフィジカルシステムの高度な IoT の可視性を実現する
As the number of IoT devices deployed globally continues to rise, cyber-physical systems and business operations are exposed to greater risk. Improving asset visibility, monitoring and risk management are critical steps to preventing breaches....
サイバーセキュリティニュース: NIST が AI のサイバーセキュリティとプライバシーリスクを調査、米国政府がロシアと中国からの自動車の IoT 機器に対する脅威に取り組む
A new NIST program will revise security frameworks like NIST’s CSF as AI risks intensify. Plus, the U.S. may ban cars with Russian and Chinese IoT components. Meanwhile, the CSA adds AI insights to its zero trust guide. And get the latest on cybersecurity budgets, SBOMs and the Ghost cybercrime plat...
CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, CVE-2024-47177: Common UNIX Printing System (CUPS) の脆弱性に関するよくある質問
Frequently asked questions about multiple vulnerabilities in the Common UNIX Printing System (CUPS) that were disclosed as zero-days on September 26....
クラウド セキュリティ プログラムを確立するためのベスト プラクティスと教訓
Tenable のクラウドセキュリティプログラムを開発するなかで、私たち情報セキュリティチームは多くの疑問を抱き、興味深い課題に直面してきました。 その過程で、私たちは貴重な教訓を学び、重要なベストプラクティスを取り入れてきました。 In this blog, we’ll discuss how we’ve approached implementing our cloud security ...
Amazon Rufus AI: “While Coca-Cola is a Popular Brand, I Would Suggest Healthier Alternatives Like Pepsi”
Our research shows how the Rufus AI assistant in Amazon’s shopping platform can be manipulated to promote one brand over another. We also found it can be used “shop” for potentially dangerous, sensitive and unauthorized content....
サイバーセキュリティニュース: 重要インフラ組織は代表的なサイバー攻撃に対して脆弱、新しい MITRE ツールは機械学習を使用して攻撃チェーンを予測
Report finds that many critical infrastructure networks can be breached using simple attacks. Plus, a new MITRE Engenuity tool uses machine learning to infer attack sequences. Meanwhile, CISA will lead a project to standardize civilian agencies’ cyber operations. And get the latest on XSS vulnerabil...