Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Tenable 블로그

February 23, 2024

사이버 보안 스냅샷: CISA에서 수도 시설에 보안을 강조하여 LockBit의 공격을 차단

Check out how cyber agencies from multiple countries hit the LockBit ransomware group. Meanwhile, CISA wants water treatment plants to button up their cyber defenses. Plus, there’s a new generative AI governance checklist for tech and business leaders. And the White House seeks to boost ports'…


February 22, 2024

IDC에서 Tenable을 5년 연속으로 전 세계 장치 취약성 관리 시정 점유율에서 1위로 보고

시장 조사 회사의 최신 보고서는 또한 보안 전문가가 취약성 관리 전략을 향상하는 데 사용할 수 있는 시장에 대한 통찰을 제공합니다.


February 21, 2024

고급 OT 보안으로 국방성 건물 관리 시스템 보호

The cyberthreats to the U.S. Department of Defense’s building management systems (BMS) have grown exponentially due to the DoD's adoption of smart technologies such as IoT. These smart technologies are designed to improve the monitoring and maintenance of these systems, but they also create new…


February 20, 2024

ScreenConnect 취약성에 대해 자주 묻는 질문

Frequently asked questions about two vulnerabilities affecting ConnectWise ScreenConnect


February 20, 2024

Managed Kubernetes: Is It Right for My Organization?

As an organization grows its usage of containers, managing them becomes more complex. A common response is to adopt Kubernetes for container orchestration. But how do you properly secure your Kubernetes clusters? And should your organization host its Kubernetes deployments or instead choose a…


February 16, 2024

사이버 보안 스냅샷: ChatGPT Gets So-So Grade in Code Analysis Test, while JCDC Pledges To Focus on Protecting Critical Infrastructure

Check out why ChatGPT’s code analysis skills left Carnegie Mellon researchers unimpressed. Plus, JCDC will put special focus on critical infrastructure security in 2024. Meanwhile, CISA and OpenSSF shine a spotlight on the security of software package repositories. And scammers leveraged tech tools…


February 14, 2024

Pig Butchering Scam: From Tinder and TikTok to WhatsApp and Telegram, How Scammers Are Stealing Millions in a Long Con

In part one of a two-part series on Pig butchering, we detail the pervasive scam that has impacted thousands of victims around the world, resulting in the loss of hundreds of millions of dollars. This blog highlights the who and the how of Pig butchering scams, and details the Pig butchering…


February 14, 2024

Pig Butchering Scam: How Bitcoin, Ethereum, Litecoin and Spot Gold (XAUUSD) Investments Are Used in Romance Scams to Steal Hundreds of Millions

This is the second part of a two-part series based on firsthand research into pig butchering scams from the end of 2022 into early 2024. In this post, we delve into the types of investment scams perpetrated by pig butchers to steal hundreds of millions of dollars from victims, including in the form…


February 13, 2024

Microsoft의 February 2024 Patch Tuesday에서 73개 CVE를 처리(CVE-2024-21351, CVE-2024-21412)

Microsoft addresses 73 CVEs, including three zero-day vulnerabilities that were exploited in the wild.


February 13, 2024

How a Serverless Architecture Can Help You Secure Cloud-Native Applications

Cybersecurity teams often struggle with securing cloud-native applications, which are becoming increasingly popular with developers. The good news is that deploying these applications on a serverless architecture can make it easier to protect them. Here’s why.


February 12, 2024

Unused Access Analyzer: A Leap Toward Least Privilege, Not the End of the Journey

AWS IAM Access Analyzer can now detect action-level unused permissions. It’s a great enhancement in the native toolbox to achieve least privilege — but if you need comprehensive entitlements management at scale you will probably need additional tooling and work. Find out why and what you can do to…


February 9, 2024

CVE-2024-21762: 중요 Fortinet FortiOS 아웃오브밴드 쓰기 SSL VPN 취약성

Fortinet warns of “potentially” exploited flaw in the SSL VPN functionality of FortiOS, as government agencies warn of pre-positioning by Chinese state-sponsored threat actors in U.S. critical infrastructure through exploitation of known vulnerabilities


도움이 되는 사이버 보안 뉴스

이메일을 입력하여 Tenable 전문가에게서 적시에 알림을 받고 보안 참고 자료를 놓치지 마십시오.

Apache Log4j Flaw Puts Third-Party Software in the Spotlight

Get the Details >

× 영업 팀에게 문의