Tenable Blog

In a pioneering cooperative effort, several industry security leaders, including Tenable, have been working on a project led by Novetta Solutions to investigate, report on, and take action against the major threat actor group dubbed “Axiom.” According to Novetta, over the past six years, Axiom’s intelligence-gathering activities have impacted international private organizations primarily in the fields of telecommunications, security, and integrated circuits, and government agencies focusing on aerospace, humanitarian and environmental issues.

Black Hat Europe 2014, a premiere conference on information security, convened in Amsterdam this October. The Tenable EMEA team was there in full force, meeting customers and conversing with other security specialists. Here is a sampling of the Tenable Black Hat perspective.

Vulnerabilities and credibility

By Colin West, Director of Sales Engineering, EMEA

In this October 13, 2014 podcast with Down the Security Rabbithole, Tenable CEO Ron Gula is interviewed by cohosts Rafal Los, James Jardine and Michael Santarcangelo on the subject of Threat and Vulnerability Management. Ron answers the question, “What is a security policy?” He discusses the hurdles to implementing a threat and vulnerability management, the importance of continuous network monitoring, and how to get out of the 1999 security mindset to a more mature security plan. 

Recently, an unusual series of attacks occurred against ATM machines in Malaysia. What makes this set of attacks unusual is that the attackers combined a physical attack against an older Windows XP based model of an NCR ATM machine with a cyber attack against the embedded PC within the machine.

It has been less than a week since news of the Shellshock vulnerability emerged, and the dust hasn’t settled yet. Our Tenable security experts share their reflections on the situation and their recommendations for reducing your exposure to Shellshock and other vulnerabilities.

Reduce your risk

Ron Gula, CEO

Along with implementing patches and fixes as they become available, there are several steps you should take to help manage your risk and reduce the threat from Shellshock.