Tenable CIS and FDCC Updates
Tenable Network Security was recently awarded certification by the Center For Internet Security to perform audits of the following best-practices benchmarks:
- Windows Server 2003 Legacy Benchmark for Domain Controllers v2.0
- Windows Server 2003 Enterprise Benchmark for Domain Controllers v2.0
- Windows Server 2003 Specialized Security Benchmark for Domain Controllers v2.0
- Windows Server 2003 Legacy Benchmark for Member Servers v2.0
- Windows Server 2003 Enterprise Benchmark for Member Servers v2.0
- Windows Server 2003 Specialized Security Benchmark for Member Servers v2.0
- Windows 2000 Server Level 2 Benchmark v2.2.1
- Windows 2000 Level 1 Benchmark v1.2.2
Previously, Tenable products had been certified to perform audits of Windows 2003 servers against version 1.2 of their benchmark. Version 2.0 of this benchmark was recently released, our content was updated and then re-submitted for certification by CIS.
Additionally, Tenable has selected SAIC to test the Security Center against the requirements of the Security Content Automation Protocol (SCAP) Validation Program. Specifically, we are seeking approval to be an authorized Federal Desktop Core Configuration (FDCC) scanner.
Related Articles
Cybersecurity Snapshot: New Report Ranks Top Cloud Threats, while CISA Guide Helps Assess Security of Software Products
August 9, 2024The Cloud Security Alliance has released its list of top cloud threats for 2024. Plus, CISA and the FBI published a guide for determining if a software product was built ‘secure by design.’ Meanwhile, find out how AI can transform offensive security. And get the latest on the Royal ransomware gang, the CIS Benchmarks and TikTok’s legal troubles!
Cybersecurity Snapshot: Data Breach Costs Rise, as Ransomware Attacks Fall, Reports Find
August 2, 2024IBM’s latest “Cost of a Data Breach Report” finds these data-theft incidents getting more expensive. Plus, the IT-ISAC says that ransomware attacks fell in Q2 due to law-enforcement disruptions of ransomware groups. Meanwhile, check out a Carnegie Mellon comp sci professor’s take on AI system security. And Tenable’s headed to Black Hat – visit our booth! And much more!
Tenable Cloud Security To Help Fed Agencies Tackle Cloud Challenges as It Nears FedRAMP Authorization
July 31, 2024As federal agencies adopt a cloud-first policy, they face unique challenges in securing cloud infrastructure. Learn how Tenable Cloud Security, which is now FedRAMP "In Process," can help.
CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
August 14, 2024Ivanti released a patch for a critical severity authentication bypass vulnerability and a warning that exploit code is publicly available
Microsoft’s August 2024 Patch Tuesday Addresses 88 CVEs
August 13, 2024Microsoft addresses 88 CVEs with seven critical vulnerabilities and 10 zero-day vulnerabilities, six of which were exploited in the wild.
Compromising Microsoft's AI Healthcare Chatbot Service
August 13, 2024Tenable Research discovered multiple privilege-escalation issues in the Azure Health Bot Service via a server-side request forgery (SSRF), which allowed researchers access to cross-tenant resources.
- Government
- Security Frameworks