Tenable 博客
Secrets at Risk: How Misconfigurations and Mistakes Expose Critical Credentials
Microsoft’s December 2021 Patch Tuesday Addresses 67 CVEs (CVE-2021-43890)
Microsoft addresses 67 CVEs in its December 2021 Patch Tuesday release, including a zero-day vulnerability that has been exploited in the wild.
Log4Shell：OT 社区应立即采取的 5 大步骤
Operational technology (OT) environments are equally at risk from the Apache Log4j flaw. Here's what you can do today.
Apache Log4j 缺陷：网络安全行业的福岛时刻
Organizations around the world will be dealing with the long-tail consequences of this vulnerability, known as Log4Shell, for years to come.
Apache Log4j 缺陷让第三方软件成为关注焦点
Even in the most mature organizations, addressing the issue, also known as Log4Shell, requires a complex mix of software development practices, vulnerability management and web application scanning.
CVE-2021-44228: Apache Log4j 严重远程代码执行漏洞概念验证现已可用 (Log4Shell)
常用日志记录库 Log4j 2 中的严重漏洞影响了许多服务和应用程序，包括 Minecraft、Steam 和 Apple iCloud。攻击者已经开始主动扫描并试图利用该缺陷。
How to Start Up Your Cloud Security
Startups may think they can postpone implementing a cloud security program but should in fact take early action — here’s why, and easy steps for doing so.
全新推出 Tenable.cs：完整的生命周期，云原生安全
新产品将最近收购的 Accurics 平台加以扩展， 聚焦基础设施即代码 (IaC)，利用针对开发和运行时工作流的集成控制机制助力 DevSecOps 并实现“左移安全”。
保障 IT-OT 环境的安全：为何 IT 安全专业人员举步维艰
在融合的 IT 和运营技术环境中提供网络安全时，信息安全专家必须了解这两个环境之间的差异，并利用工具集在单一视图中提供两者的全局概况。
#GivingTuesday: Favorite Charities of Tenable Employees
This year for #GivingTuesday, we highlight some of the causes that Tenable employees have championed this year and invite you to do the same.