マイクロソフトの 2025 年 4 月月例セキュリティ更新プログラム: 121 件の CVE を修正(CVE-2025-29824)
Microsoft addresses 121 CVEs including one zero-day which was exploited in the wild.
CVE-2025-1097、CVE-2025-1098、CVE-2025-1974、CVE-2025-24513、CVE-2025-24514: Ingress Nightmare に関するよくある質問
Frequently asked questions about five vulnerabilities in the Ingress NGINX Controller for Kubernetes, collectively known as IngressNightmare.
DeepSeek Deep Dive: キーロガーやランサムウェアなどのマルウェアの作成
Tenable Research examines DeepSeek R1 and its capability to develop malware, such as a keylogger and ransomware. We found it provides a useful starting point, but requires additional prompting and debugging.
マイクロソフト 2025 年 3 月月例セキュリティ更新プログラム、56 件の CVE を修正 (CVE-2025-26633、CVE-2025-24983、CVE-2025-24993)
Microsoft addresses 56 CVEs, including seven zero-day flaws, with six of those being exploited in the wild.
CVE-2025-22224、CVE-2025-22225、CVE-2025-22226: VMware ESXi、Workstation、Fusion のゼロデイ脆弱性が悪用される
Broadcom published an advisory for three flaws in several VMware products that were exploited in the wild as zero-days. Organizations are advised to apply the available patches.
Frequently Asked Questions About DeepSeek Large Language Model (LLM)
The open-source LLM known as DeepSeek has attracted much attention in recent weeks with the release of DeepSeek V3 and DeepSeek R1, and in this blog, The Tenable Security Response Team answers some of the frequently asked questions (FAQ) about it.
マイクロソフトの 2025 年 2 月月例セキュリティ更新プログラム 55 件の CVE に対処 (CVE-2025-21418、CVE-2025-21391)
Microsoft addresses 55 CVEs with three rated critical and four zero-day vulnerabilities, including two that were exploited in the wild.
CVE-2025-23006: SonicWall Secure Mobile Access (SMA) 1000 のゼロデイ脆弱性の悪用が確認される
A zero-day vulnerability in SonicWall’s Secure Mobile Access (SMA) 1000 was reportedly exploited in the wild according to researchers.
Salt Typhoon: 国家支援を受けた攻撃者が悪用した脆弱性の分析
Salt Typhoon という、中華人民共和国に関連する国家主導の攻撃者グループが、少なくとも 9 つの米国拠点の通信企業に侵入しました。その目的は、高官や政治関係者を標的にすることです。 Tenable Research examines the tactics, techniques and procedures of this threat…
オラクル、2025 年 1 月クリティカルパッチアップデートで 186 件の脆弱性を修正
Oracle addresses 186 CVEs in its first quarterly update of 2025 with 318 patches, including 30 critical updates.BackgroundOn January 21, Oracle released its Critical Patch Update (CPU) for January 2025, the first quarterly update of the year. This CPU contains fixes for 186 CVEs in 318 security…
CVE-2024-55591: フォーティネットの認証バイパスのゼロデイ脆弱性の悪用が確認される
Fortinet patched a zero day authentication bypass vulnerability in FortiOS and FortiProxy that has been actively exploited in the wild as a zero-day since November 2024.
マイクロソフトの 2025 年 1 月月例パッチ、157 件の CVE を修正 (CVE-2025-21333、CVE-2025-21334、CVE-2025-21335)
Microsoft addresses 157 CVEs in the first Patch Tuesday release of 2025 and the largest Patch Tuesday update ever with three CVEs exploited in the wild, and five CVEs publicly disclosed prior to patches being made available.