Tenable Network Security Podcast Episode 166 - "Nessus 5.2 New Features"
Announcements
- We're hiring! - Visit the Tenable website for more information about open positions.
- Check out our video channel on YouTube which contains new Nessus and SecurityCenter tutorials.
- Tenable Tweets - You can find us on Twitter at http://twitter.com/tenablesecurity where we make product and company announcements, provide Nessus plugin statistics, and more!
- Want to ask questions about Nessus, SecurityCenter, LCE, and PVS and get answers from the experts at Tenable? Join Tenable's Discussion Forum for custom scripts, announcements, and more!
- You can subscribe to the Tenable Network Security Podcast on iTunes!
Nessus 5.2 Released
Tenable announced the availability of Nessus 5.2. For more details, also view the blog post and the introduction video.
New Features:
- Attachments in scan results (RDP, VNC, and website screenshots initially)
- HTML5 interface performance improvements
- Smaller memory footprint and reduced disk space usage
- Mac OS X preference pane
- Windows 8 and Windows Server 2012 support
- And a whole lot more in the future
New & Notable Plugins
Nessus
General
- Cerb Multiple Vulnerabilities
- Lenovo ThinkPad Bluetooth with Enhanced Data Rate Arbitrary DLL Injection Code Execution Vulnerability
- MantisBT 1.2.x < 1.2.14 adm_config_report.php Multiple Parameter XSS
- Cisco AnyConnect Secure Mobility Client 2.x / 3.x < 3.1(3103) Host Scan Multiple Vulnerabilities
- IBM Rational ClearQuest 7.1.x < 7.1.2.10 Web Client XSS (credentialed check)
Application Detection
Passive Vulnerability Scanner
SecurityCenter Report Templates and Dashboards
Configuration and Compliance Auditing
Nessus ProfessionalFeed and SecurityCenter customers can download compliance checks from the Tenable Support Portal.
Security News Stories
Related Articles
Tenable Network Security Podcast Episode 198 - "PCI Discussion Featuring Jeffrey Man"
February 13, 2014<p></p>
CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
August 14, 2024Ivanti released a patch for a critical severity authentication bypass vulnerability and a warning that exploit code is publicly available
Microsoft’s August 2024 Patch Tuesday Addresses 88 CVEs
August 13, 2024Microsoft addresses 88 CVEs with seven critical vulnerabilities and 10 zero-day vulnerabilities, six of which were exploited in the wild.
Compromising Microsoft's AI Healthcare Chatbot Service
August 13, 2024Tenable Research discovered multiple privilege-escalation issues in the Azure Health Bot Service via a server-side request forgery (SSRF), which allowed researchers access to cross-tenant resources.
- Podcast