Microsoft 2023 年 4 月补丁星期二解决了 97 个 CVE (CVE-2023-28252)
Microsoft addresses 97 CVEs, including one that was exploited in the wild as a zero day....
TSA、FAA 要求特别注意机场和飞机运营商以及机场航站楼项目的网络安全：Tenable 能够带来哪些助益
The TSA and FAA are making cybersecurity a priority for airport and aircraft operators and for airport terminal projects to prevent disruption and degradation to their infrastructure. Here's what you need to know — and how Tenable can help....
Tenable 网络观察：美国美国政府考虑封禁 TikTok，欧洲刑警组织警告 ChatGPT 会带来网络安全风险，等等
This week’s edition of the Tenable Cyber Watch unpacks the U.S. government’s efforts to ban TikTok and addresses Europol’s concerns about ChatGPT cyber risks. Also covered: How CISA’s new pre-ransomware alert initiative could be a gamechanger for would-be ransomware victims. ...
网络安全快照： 使用 ChatGPT 可能会造成数据隐私违规
Learn how businesses can run afoul of privacy laws with generative AI chatbots like ChatGPT. Plus, the job market for cyber analysts and engineers looks robust. Also, cybercrooks lost a major resource with the Genesis Market shutdown. In addition, the six common mistakes cyber teams make. And much m...
Terraform Lab: Taking the New VPC Endpoint Condition Keys Out for a Spin
Our new open source Terraform project offers hands-on experience with VPC endpoints and demos AWS's new condition keys for securing EC2 instances...
Tenable 网络观察：MITRE ATT&CK 映射帮助，为何企业在保护 SaaS 数据方面困难重重，等等
This week’s edition of the Tenable Cyber Watch unpacks CISA’s new ‘Decider” tool, which aims to streamline MITRE ATT&CK mapping. We also explore why organizations struggle with data protection of software as a service apps. Also covered: Why cyber pros think cloud creates opportunities for cyber tea...
網路安全快照： CISA Issues Incident Response Tool for Microsoft Cloud Services
Learn about a free tool for detecting malicious activity in Microsoft cloud environments. Plus, Europol warns about ChatGPT cyber risks. Also, how business email compromise (BEC) scammers are stealing merchandise. In addition, CISA alerts orgs about early-stage ransomware breaches. And much more! ...
据报道，Windows 和 macOS 版 3CX 桌面应用程序在供应链攻击中受损
A softphone desktop application from 3CX, makers of a popular VoIP PBX solution used by over 600,000 organizations, has reportedly been trojanized as part of a supply chain attack...
混合云安全的五个核心原则
How to build a hybrid-cloud security strategy that is effective, scalable and affordable. ...
风险暴露管理：平台方案的 7 大优势
在谈到预防性网络安全时，长期以来就争议不断：使用一系列最佳的单点解决方案更有效，还是采取更加整合的平台方案更有效。Here are seven reasons an exposure management platform can help reduce cyber risk....
EPA 颁布针对公共供水系统的网络安全法规：Tenable 能够带来哪些助益
EPA released new regulations that require states to assess cybersecurity risks at drinking water systems and ensure these systems have sufficient cyber protections. Here’s what you need to know — and how Tenable can help....
Tenable 网络观察：U.K. 网络机构担忧 ChatGPT 会造成隐私问题，CISA 计划应对关键基础设施中的勒索软件，等等
This week’s edition of the Tenable Cyber Watch unpacks CISA’s new pilot program that detects vulnerabilities in critical infrastructure and addresses the FBI’s plea for more ransomware victims to report attacks. Also covered: Why the U.K. National Cyber Security Centre is warning ChatGPT users to tr...