Tenable ブログ
サイバーセキュリティニュース: AI Security Trails AI Usage, Putting Data at Risk, IBM Warns, as OWASP Tackles Agentic AI App Security
Microsoft’s June 2024 Patch Tuesday Addresses 49 CVEs
Microsoft addresses 49 CVEs in its June 2024 Patch Tuesday release with one rated as critical and no zero-day or publicly disclosed vulnerabilities. Our counts omitted two CVEs that were not issued by Microsoft, which include CVE-2023-50868 (issued by MITRE) and CVE-2024-29187 (issued by GitHub)....
クラウドワークロード保護: クラウドセキュリティリスクを効果的に軽減
全侵害事例のうち 80% 以上が、クラウドに保存されたデータに関連しています。クラウドワークロード保護 (CWP) を使用していないセキュリティチームが、最小の労力で可能な限り多くのデータにアクセスしようとする攻撃者に先んじることはほぼ不可能でしょう。 A single cloud breach is often the most straightforward way into these...
CVE-2024-4577: Proof of Concept Available for PHP-CGI Argument Injection Vulnerability
Researchers disclose a critical severity vulnerability affecting PHP installations and provide proof-of-concept exploit code, which could lead to remote code execution....
サイバーセキュリティニュース: NIST プログラムは現実的なシナリオで AI がどのように機能するかを評価、FBI は LockBit の被害者を支援するため多数の復号化キーを保有していることを公表
Check out the new ARIA program from NIST, designed to evaluate if an AI system will be safe and fair once it’s launched. Plus, the FBI offers to help LockBit victims with thousands of decryption keys. In addition, Deloitte finds that boosting cybersecurity is key for generative AI deployment success...
Tenable、CISA と提携し、セキュリティ・バイ・デザインのプラクティスを強化
When CISA called on the world’s leading software manufacturers to sign its Secure by Design pledge, Tenable answered promptly and enthusiastically, becoming part of the first wave of supporters of this landmark initiative. In this blog post, Tenable CSO, Head of Research and President of Public Sect...
ロックウェル･オートメーション: パブリックインターネットアクセスを持つ OT デバイスを切断し、Logix、FactoryTalk の CVE にパッチを適用しリスクを軽減する
An advisory from Rockwell Automation reiterates the importance of disconnecting operational technology devices with public-facing internet access and patching and mitigating systems vulnerable to several flaws....
CVE-2024-4358、CVE-2024-1800: Progress Telerik Report Server の重大なエクスプロイトチェーンのエクスプロイトコードがリリース
Researchers have released an exploit chain to achieve remote code execution on unpatched instances of Progress Telerik Report Server. Immediate patching is recommended....
サービスタグを悪用して Azure ファイアウォールルールをバイパスする脆弱性が発見される
Azure customers whose firewall rules rely on Azure Service Tags, pay attention: You could be at risk due to a vulnerability detected by Tenable Research. Here’s what you need to know to determine if you’re affected, and if so, what you should do right away to protect your Azure environment from atta...
サイバーセキュリティニュース: AI を安全かつ倫理的に実装するための 6 つのベストプラクティス
Like many organizations, yours is likely using AI – or at least thinking about deploying it soon. But how can you ensure you use it securely, responsibly, ethically and in compliance with regulations? Check out best practices, guidelines and tips in this special edition of the Tenable Cybersecurity ...
