Tenable Network Security Podcast Episode 163 - "Bind Vulnerability, Windows Hardening"
Announcements
- We're hiring! - Visit the Tenable website for more information about open positions.
- Check out our video channel on YouTube which contains new Nessus and SecurityCenter tutorials.
- Tenable Tweets - You can find us on Twitter at http://twitter.com/tenablesecurity where we make product and company announcements, provide Nessus plugin statistics, and more!
- Want to ask questions about Nessus, SecurityCenter, LCE, and PVS and get answers from the experts at Tenable? Join Tenable's Discussion Forum for custom scripts, announcements, and more!
- You can subscribe to the Tenable Network Security Podcast on iTunes!
New & Notable Plugins
Nessus
General
- Novell Messenger Client Detection (Mac OS X)
- Novell Messenger Client Import Command Remote Code Execution
- Apple OS X Profile Manager Device Management Private Interface Managed Device Enumeration
- Eye-Fi Helper < 3.4.23 Directory Traversal
- Stunnel 4.21 - 4.54 Multiple Vulnerabilities
- Google Chrome < 26.0.1410.43 Multiple Vulnerabilities
- MS KB2819682: Security Updates for Microsoft Windows Store Applications
- Viscosity ViscosityHelper Symlink Attack Local Privilege Escalation
- Git Repository Served by Web Server
- Patch Management: Tivoli Endpoint Manager Get Installed Packages
- GD Star Rating Plugin for WordPress export.php Authentication Bypass Information Disclosure
- VMSA-2013-0004 : VMware ESXi security update for third party library
- ISC BIND 9 libdns Regular Expression Handling DoS
- McAfee Vulnerability Manager cert_cn Parameter XSS
Application Detection
Java
Databases
Passive Vulnerability Scanner
SecurityCenter Report Templates
Stories
- Many Amazon S3 cloud storage users are exposing sensitive company secrets
- Windows Hardening Guide
- Digital cameras easily turned into spying devices
- Three reasons you shouldn't neglect your application security
- Got Attitude?
- Thousands of paroled CA sex offenders, felons easily disable GPS monitors
- Brace for more mega-DDoS attacks
Related Articles
Tenable Network Security Podcast Episode 198 - "PCI Discussion Featuring Jeffrey Man"
February 13, 2014<p></p>
Cybersecurity Snapshot: NIST Program Probes AI Cyber and Privacy Risks, as U.S. Gov’t Tackles Automotive IoT Threat from Russia, China
September 27, 2024A new NIST program will revise security frameworks like NIST’s CSF as AI risks intensify. Plus, the U.S. may ban cars with Russian and Chinese IoT components. Meanwhile, the CSA adds AI insights to its zero trust guide. And get the latest on cybersecurity budgets, SBOMs and the Ghost cybercrime platform!
CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, CVE-2024-47177: Frequently Asked Questions About Common UNIX Printing System (CUPS) Vulnerabilities
September 26, 2024Frequently asked questions about multiple vulnerabilities in the Common UNIX Printing System (CUPS) that were disclosed as zero-days on September 26.
Establishing a Cloud Security Program: Best Practices and Lessons Learned
September 26, 2024As we’ve developed Tenable’s cloud security program, we in the Infosec team have asked many questions and faced interesting challenges. Along the way, we’ve learned valuable lessons and incorporated key best practices. In this blog, we’ll discuss how we’ve approached implementing our cloud security program using Tenable Cloud Security, and share recommendations that you may find helpful.
- Podcast