Oracle July 2025 Critical Patch Update Addresses 165 CVEs
Oracle addresses 165 CVEs in its third quarterly update of 2025 with 309 patches, including nine critical updates.
Microsoft의 2025년 7월 Patch Tuesday에서 128개의 CVE(CVE-2025-49719)를 처리
Microsoft addresses 128 CVEs, including one zero-day vulnerability that was publicly disclosed.
CVE-2025-5777, CVE-2025-6543: CitrixBleed 2 및 Citrix NetScaler 악용에 대해 자주 묻는 질문
Frequently asked questions about recent Citrix NetScaler ADC and Gateway vulnerabilities that have reportedly been exploited in the wild, including CVE-2025-5777 known as CitrixBleed 2.
이란 사이버 운영에 대해 자주 묻는 질문
Tenable’s Research Special Operations team focuses on some frequently asked questions about Iranian cyber operations, including the tactics, techniques and procedures employed by Iran-based threat actors.
Microsoft의 June 2025 Patch Tuesday에서 65개 CVE에 대응 (CVE-2025-33053)
Microsoft addresses 65 CVEs, including two zero-day vulnerabilities, with one being exploited in the wild.
BadSuccessor에 대해 자주 묻는 질문
Frequently asked questions about “BadSuccessor,” a zero-day privilege escalation vulnerability in Active Directory domains with at least one Windows Server 2025 domain controller.
CVE-2025-32756: 다수의 Fortinet 제품에서 제로데이 취약성이 널리 악용됨
Fortinet has observed threat actors exploiting CVE-2025-32756, a critical zero-day arbitrary code execution vulnerability which affects multiple Fortinet products including FortiVoice, FortiMail, FortiNDR, FortiRecorder and FortiCamera.
CVE-2025-4427, CVE-2025-4428: Ivanti Endpoint Manager Mobile (EPMM) 원격 코드 실행
Remote code execution vulnerability in a popular mobile device management solution from Ivanti has been exploited in the wild in limited attacks
Microsoft의 May 2025 Patch Tuesday에서 71개 CVE(CVE-2025-32701, CVE-2025-32706, CVE-2025-30400)에 대응
Microsoft addresses 71 CVEs including seven zero-days, five of which were exploited in the wild.
수정 시간 단축이 여전히 도전 과제: Tenable Vulnerability Watch가 도움이 되는 방식
조직의 운영에 가장 큰 위험이 되는 노출의 우선 순위를 지정하는 데 어려움을 겪고 있으므로 적시에 취약성 수정은 조직에게 계속해서 도전 과제가 됩니다. 기존 점수 시스템은 중요하지만 컨텍스트가 부족할 수 있습니다. Here’s how Tenable’s Vulnerability Watch classification system…
CVE-2025-31324: SAP NetWeaver의 제로데이 취약성이 널리
SAP has released out-of-band patch to address CVE-2025-31324, a critical zero-day vulnerability in SAP NetWeaver that has been exploited by threat actors. Organizations are strongly encouraged to apply patches as soon as possible.
CVE-2025-32433: Erlang/OTP SSH 인증되지 않은 원격 코드 실행 취약성
Proof-of-concept code has been released after researchers disclosed a maximum severity remote code execution vulnerability in Erlang/OTP SSH. Successful exploitation could allow for complete takeover of affected devices.
영업 팀에게 문의