Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Blogs Tenable

September 30, 2025

The Trifecta: How Three New Gemini Vulnerabilities in Cloud Assist, Search Model, and Browsing Allowed Private Data Exfiltration

Tenable Research discovered three vulnerabilities (now remediated) within Google’s Gemini AI assistant suite, which we dubbed the Gemini Trifecta. These vulnerabilities exposed users to severe privacy risks. They made Gemini vulnerable to search-injection attacks on its Search Personalization Model; log-to-prompt injection attacks against Gemini Cloud Assist; and exfiltration of the user’s saved information and location data via the Gemini Browsing Tool.

October 19, 2021

3 Qualifications Cyber Safety Review Board Members Must Have

Expertise in security forensics, technology development and aligning cybersecurity with business goals are essential to advising federal policymakers following significant cyber incidents. In May, President Joe Biden signed an executive order to address the barrage of cyber incidents and…


October 18, 2021

Spotlight on Japan: Digital Transformation Initiatives Heighten Risk Levels 

As Japanese organizations roll out digital transformation initiatives and expand remote workforces, security teams need to address new risks in the new world of work. The rapid transition to remote work and an intense focus on meeting customer demands through digital transformation initiatives…


October 14, 2021

Spotlight on Brazil: Remote Work Requires New Risk Management Practices

Remote work is here to stay — along with the risks it introduces to Brazilian organizations, if not managed properly. Voici ce qu'il faut savoir.The pandemic forced many Brazilian organizations to shift employees from working largely in offices to entirely remote in the blink of an eye…


October 14, 2021

As a Busy 2021 Draws to a Close, What is Capitol Hill Focusing on Next?

Cybersecurity priorities like zero trust, infrastructure security and more must remain top of mind for Congress in 2022  2021 has proven to be a big year for cybersecurity. Zero trust, a concept introduced 10 years ago, suddenly gained attention as the next hot cybersecurity solution…


October 7, 2021

Five Strategies for Mitigating Your S3 Misconfiguration Ransomware Threat

Check out these detailed steps to improve ransomware protection of your AWS environment.


October 7, 2021

The Urgent Threat of Ransomware to S3 Buckets Due to Misconfigurations

Learn all about misconfigurations that can lead to S3 ransomware exposure and the mitigation tools you can leverage to prevent it.


October 7, 2021

Cybersecurity Awareness: Six Tips to Help Your Employees Be Cybersmart

We believe it's time for a new approach to cyber awareness, one that borrows on the concept of the shared responsibility model common in cloud computing. Here's how we get there. How much consideration does the average employee give to cybersecurity in your organization? If you're like most, you…


October 7, 2021

Tenable.io and Tenable.io WAS Achieve FedRAMP Authorization

Six reasons why FedRAMP authorization for Tenable.io and Tenable.io Web App Scanning (WAS) is important for our customers and partners. After lengthy and rigorous testing under the U.S. Federal Risk and Authorization Management Program (FedRAMP), we are excited to announce that Tenable.io and…


October 5, 2021

CVE-2021-41773 : Path Traversal Zero-Day in Apache HTTP Server Exploited

The Apache HTTP Server Project patched a path traversal vulnerability introduced less than a month ago that has been exploited in the wild.Update October 7: The Solution section has been updated to reflect the secondary fix the Apache HTTP Server Project released.BackgroundOn October 5, the Apache…


Des actualités utiles sur la cyber-sécurité

Saisissez votre adresse e-mail et ne manquez plus aucune alerte ni aucun conseil en matière de sécurité de la part de nos experts Tenable.

Coup d’œil sur l'écosystème des ransomwares

Téléchargez le rapport >

× Contactez notre équipe commerciale