Tenable ブログ
クラウドセキュリティにおける「特権クリープ」への対応

エクスポージャー管理が 3 社のサイバーセキュリティプログラムの変革に貢献
Part two of our Exposure Management Academy series on exposure management maturity explores how organizations like Drogaria Araujo, Tenable and Verizon have applied exposure management to strengthen their security postures.
CVE-2025-61882: Oracle E-Business Suite (EBS) のゼロデイ脆弱性および関連する脆弱性に関するよくある質問
Following reports the Cl0p ransomware group has been extorting Oracle E-Business Suite customers, Oracle released an advisory for a zero-day that was exploited in the wild.
サイバーセキュリティニュース: AI セキュリティが深刻な問題に直面する中でサイバーセキュリティ啓発月間が始まる、新しい OT セキュリティガイドラインはアーキテクチャマッピングを重視
As we kick off Cybersecurity Awareness Month, AI security challenges take the spotlight. Meanwhile, new marching orders say OT security teams need a comprehensive view of their systems. And get the latest on post-quantum computing standards and on a fresh batch of CIS Benchmarks!
購入するか構築するかのジレンマ:エクスポージャー管理における DIY アプローチの落とし穴
Some security teams are taking a do-it-yourself approach to exposure management, according to a recent study conducted by Enterprise Strategy Group, now part of Omdia, in partnership with Tenable. But are they really ready for the hidden costs and challenges that come with a homegrown system?
Trifecta: クラウドアシスト、検索モデル、ブラウジングにおける 3 つの新たな Gemini の脆弱性により個人データが流出
Tenable Research discovered three vulnerabilities (now remediated) within Google’s Gemini AI assistant suite, which we dubbed the Gemini Trifecta. These vulnerabilities exposed users to severe privacy risks. They made Gemini vulnerable to: search-injection attacks on its Search Personalization…
サイバーセキュリティニュース: CISA が侵害分析における脆弱性管理の重要性を強調、シスコの製品に対するゼロデイ攻撃のパッチ適用が強く推奨される
CISA’s takeaways of an agency hack include a call for timely vulnerability patching. Plus, Cisco zero-day bugs are under attack — patch now. Meanwhile, the CSA issued a framework for SaaS security. And get the latest on the npm breach, the ransomware attack that disrupted air travel and more!
CVE-2025-20333、CVE-2025-20362: Cisco Adaptive Security Appliance (ASA) および Firewall Threat Defense (FTD) のゼロデイ脆弱性に関するよくある質問
Cisco published advisories and a supplemental post about three zero-day vulnerabilities, two of which were exploited in the wild by an advanced threat actor associated with the ArcaneDoor campaign.
将来に備えたサイバーセキュリティ支出
A recent study conducted by Enterprise Strategy Group, now part of Omdia, in partnership with Tenable reveals that complexity is driving a growing number of organizations to increase their exposure management budgets. Here are 5 considerations to help make the most of your investments.
州全体のサイバーセキュリティ: 州・地方行政機関や教育機関(SLED)を統合して最大限の効果を実現
In my work at Tenable, I’ve had the opportunity to meet with many CIOs, CISOs and executives nationwide. I’ve seen firsthand how successful whole-of-state efforts can solve three key challenges and help agencies reduce their cyber risk.