Anatomy of Security Disasters (and why there's worse to come) - Ranum
Blog

    







	

  

  

  

  

  

  

  






  
    
      
      
          Featured
          Context Is King: From Vulnerability Management to Exposure Management
          November 7, 2024
                          Vulnerability management remains a cornerstone of preventive cybersecurity, but organizations still struggle with vulnerability overload and sophisticated threats. Tenable’s new Exposure Signals gives security teams comprehensive context, so they can shift from vulnerability management to exposure management and effectively prioritize high-risk exposures across their complex attack surface.
                      
          
        
      
    
    
    
        Securing Financial Data in the Cloud: How Tenable Can Help
        November 4, 2024
                      Preventing data loss, complying with regulations, automating workflows and managing access are four key challenges facing financial institutions. Learn how Tenable can help.
                  
        
      
          
    
    
        Cybersecurity Snapshot: Apply Zero Trust to Critical Infrastructure’s OT/ICS, CSA Advises, as Five Eyes Spotlight Tech Startups’ Security 
        November 1, 2024
                      Should critical infrastructure orgs boost OT/ICS systems’ security with zero trust? Absolutely, the CSA says. Meanwhile, the Five Eyes countries offer cyber advice to tech startups. Plus, a survey finds “shadow AI” weakening data governance. And get the latest on MFA methods, CISO trends and Uncle Sam’s AI strategy.
                  
        
      
          
    
    
        FY 2024 State and Local Cybersecurity Grant Program Adds CISA KEV as a Performance Measure
        October 31, 2024
                      The CISA Known Exploited Vulnerabilities (KEV) catalog and enhanced logging guidelines are among the new measurement tools added for the 2024 State and Local Cybersecurity Grant Program.
                  
        
      
          
    
    
        Cybersecurity Snapshot: New Guides Offer Best Practices for Preventing Shadow AI and for Deploying Secure Software Updates
        October 25, 2024
                      Looking for help with shadow AI? Want to boost your software updates’ safety? New publications offer valuable tips. Plus, learn why GenAI and data security have become top drivers of cyber strategies. And get the latest on the top “no-nos” for software security; the EU’s new cyber law; and CISOs’ communications with boards.
                  
        
      
          
    
    
        How To Protect Your Cloud Environments and Prevent Data Breaches
        October 24, 2024
                      As organizations create and store more data in the cloud, security teams must ensure the data is protected from cyberthreats. Learn more about what causes data breaches and about the best practices you can adopt to secure data stored in the cloud.
                  
        
      
          
    
    
        CVE-2024-47575: Frequently Asked Questions About FortiJump Zero-Day in FortiManager and FortiManager Cloud
        October 23, 2024
                      Frequently asked questions about a zero-day vulnerability in Fortinet’s FortiManager that has reportedly been exploited in the wild.
                  
        
      
          
          
      
      
    
    
        From Bugs to Breaches: 25 Significant CVEs As MITRE CVE Turns 25
        October 22, 2024
                      Twenty five years after the launch of CVE, the Tenable Security Response Team has handpicked 25 vulnerabilities that stand out for their significance.
                  
        
      
          
    
    
        CVE-2024-8260: SMB Force-Authentication Vulnerability in OPA Could Lead to Credential Leakage
        October 22, 2024
                      Tenable Research discovered an SMB force-authentication vulnerability in Open Policy Agent (OPA) that is now fixed in the latest release of OPA. The vulnerability could have allowed an attacker to leak the NTLM credentials of the OPA server's local user account to a remote server, potentially allowing the attacker to relay the authentication or crack the password. The vulnerability affected both the OPA CLI (Community and Enterprise editions) and the OPA Go SDK.
                  
        
      
          
    
    
        Cybersecurity Snapshot: Tenable Report Warns About Toxic Cloud Exposures, as PwC Study Urges C-Suite Collaboration for Stronger Cyber Resilience
        October 18, 2024
                      Check out invaluable cloud security insights and recommendations from the “Tenable Cloud Risk Report 2024.” Plus, a PwC study says increased collaboration between CISOs and fellow CxOs boosts cyber resilience. Meanwhile, a report finds the top cyber skills gaps are in cloud security and AI. And get the latest on SBOMs; CIS Benchmarks; and cyber pros’ stress triggers.
                  
        
      
          
    
    
        At Nearly $1 Billion Global Impact, the Best Cloud Security Couldn’t Stop This Hybrid Attack Path. Takeaway: Map and Close Viable Attack Paths Before Breaches Begin.
        October 16, 2024
                      Conventional wisdom suggests best-of-breed is the only way to secure your clouds. But what of hybrid attack paths that cross security domains — like those exploited in the SolarWinds and Capital One breaches? Exposing the gaps attackers exploit to move laterally requires visibility and context across security silos.
                  
        
      
          
    
    
        Oracle October 2024 Critical Patch Update Addresses 198 CVEs
        October 15, 2024
                      Oracle addresses 198 CVEs in its fourth quarterly update of 2024 with 334 patches, including 35 critical updates.
                  
        
      
          
    
    
        Harden Your Cloud Security Posture by Protecting Your Cloud Data and AI Resources
        October 15, 2024
                      Learn how data security posture management (DSPM) and AI security posture management (AI-SPM) can help you address key cloud security challenges.
                  
        
      
  
    
  
        




      Cybersecurity News You Can Use
      Enter your email and never miss timely alerts and security guidance from the experts at Tenable.
      
      
      
      
    





  
  
      Tenable Vulnerability Management
      Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy.
      Your Tenable Vulnerability Management trial also includes Tenable Lumin and Tenable Web App Scanning.
    

  
      Tenable Vulnerability Management
      Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.
      
        
          100 assets
          
        

        
        Choose your subscription option:
        

        

        
          Thank You
          Thank you for your interest in Tenable Vulnerability Management. A representative will be in touch soon.
        
      
    

  
  
    Tenable Vulnerability Management
    Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy.
    Your Tenable Vulnerability Management trial also includes Tenable Lumin and Tenable Web App Scanning.
    
  

  
      Tenable Vulnerability Management
      Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.
      
        
          100 assets
          
        

        
        Choose your subscription option:
        

        

        
          Thank you
          Thank you for your interest in Tenable.io. A representative will be in touch soon.
        
      
  

  
  
    Tenable Vulnerability Management
    Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy.
    Your Tenable Vulnerability Management trial also includes Tenable Lumin and Tenable Web App Scanning.
    
  

  
      Tenable Vulnerability Management
      Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.
      
        
          100 assets
          
        

        
        Choose your subscription option:
        

        

        
          Thank you
          Thank you for your interest in Tenable Vulnerability Management. A representative will be in touch soon.
        
      
  

    
    
        Try Tenable Web App Scanning
        Enjoy full access to our latest web application scanning offering designed for modern applications as part of the Tenable One Exposure Management platform. Safely scan your entire online portfolio for vulnerabilities with a high degree of accuracy without heavy manual effort or disruption to critical web applications. Sign up now.
        Your Tenable Web App Scanning trial also includes Tenable Vulnerability Management and Tenable Lumin.
        
    
    
        Buy Tenable Web App Scanning
        Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.
        
    

  
  
    Try Tenable Lumin
    Visualize and explore your exposure management, track risk reduction over time and benchmark against your peers with Tenable Lumin.
    Your Tenable Lumin trial also includes Tenable Vulnerability Management and Tenable Web App Scanning.
    
  
  
    Buy Tenable Lumin
    Contact a sales representative to see how Tenable Lumin can help you gain insight across your entire organization and manage cyber risk.
    
          Thank you
          Thank you for your interest in Tenable Lumin. A representative will be in touch soon.
        
  


      Request a demo of Tenable Security Center
      Please fill out this form with your contact information.A sales representative will contact you shortly to schedule a demo.
      * Field is required
    

      Request a demo of Tenable OT Security
      Get the Operational Technology security you need.Reduce the risk you don’t.
    

      Request a demo of Tenable Identity Exposure
      Continuously detect and respond to Active Directory attacks. No agents. No
        privileges.On-prem and in the cloud.
    

      Request a demo of Tenable Cloud Security
      
      Exceptional unified cloud security awaits you!
      
      We’ll show you exactly how Tenable Cloud Security helps you deliver multi-cloud asset discovery, prioritized risk assessments and automated compliance/audit reports.
    


      See Tenable One in action
      Exposure management for the modern attack surface.
    

      See Tenable Attack Surface Management in action
      Know the exposure of every asset on any platform.
    

    
      Get a demo of Tenable Enclave Security
      Please fill out the form with your contact information and a sales representative will contact you shortly to schedule a demo.
    
    
          Thank You
          Thank you for your interest in Tenable Enclave Security. A representative will be in touch soon.
        
  


  
  
    Try Tenable Nessus Professional free
    Free for 7 daysTenable Nessus is the most comprehensive vulnerability scanner on the market today.
    
      NEW - Tenable Nessus Expert now available
      Nessus Expert adds even more features, including external attack surface scanning, and the ability to add domains and scan cloud infrastructure. Click here to Try Nessus Expert.
    
    Fill out the form below to continue with a Nessus Pro trial.
    
  
  

    Buy Tenable Nessus Professional
    Tenable Nessus is the most comprehensive vulnerability scanner on the market today. Tenable Nessus Professional will help automate the vulnerability scanning process, save time in your compliance cycles and allow you to engage your IT team.
    Buy a multi-year license and save. Add Advanced Support for access to phone, community and chat support 24 hours a day, 365 days a year.
    
    
  

  
  
    Try Tenable Nessus Expert free
    Free for 7 days.Built for the modern attack surface, Nessus Expert enables you to see more and protect your organization from vulnerabilities from IT to the cloud.
    Already have Tenable Nessus Professional? Upgrade to Nessus Expert free for 7 days.
    
  
  
    Buy Tenable Nessus Expert
    Built for the modern attack surface, Nessus Expert enables you to see more and protect your organization from vulnerabilities from IT to the cloud.
    
    
    

      Learn How Tenable Helps Achieve SLCGP Cybersecurity Plan Requirements
      Tenable solutions help fulfill all SLCGP requirements. Connect with a Tenable representative to learn more.
    



  