Blogs Tenable
What’s New in Tenable Cloud Security: November Updates in Exposure Management
CVE-2025-55182: Frequently Asked Questions About React2Shell: React Server Components Remote Code Execution Vulnerability
A maximum severity vulnerability (CVSS 10) was discovered in React, one of the most popular JavaScript frameworks. If your app supports React Server Components, you are likely vulnerable out of the box, even if you aren’t using Server Functions explicitly. Patch immediately.
Exposure Management Vs. Siloed Security Tools: 4 Ways to Supercharge Your Strategy — and Your Career
Adding more tools to your vulnerability management program only adds noise and expense without solving your biggest challenges. With an exposure management platform, you can address your current needs without straining your budget — and boost your career by demonstrating your skills in the process…
Reinvigorating Federal Cybersecurity Post Shutdown: Tenable Supports the Cybersecurity Coalition’s Call to Action
The end of the U.S. federal shutdown is a pivotal moment to rebuild and accelerate national cybersecurity. Tenable supports the Cybersecurity Coalition's four-point plan for modernized defenses, renewed legislation, unified leadership, and revitalized collaboration.
From Brittle to Scalable: AWS Boosts VPC Perimeter Security with New IAM Keys
AWS has released three new IAM condition keys for VPC endpoints to strictly limit access by specific accounts, organizational units, or AWS Organizations. Learn how these keys help you build scalable security perimeters and reduce manual policy maintenance.
Sécurité de l'IA agentique : Évitez que vos manquements en matière de cybersécurité ne se transforment en une violation de données mondiale.
L’utilisation du Code Claude comme arme révèle la véritable menace : La démocratisation et l'orchestration des capacités d'attaque existantes. Cela prouve que négliger les règles fondamentales de cybersécurité permet à une IA malveillante d'exécuter des attaques de grande envergure avec une rapidité sans précédent et un niveau de compétence très faible.
Une défense pratique contre les attaques menées par l'IA
The era of AI-driven cyberattacks is here, demonstrated by the recent abuse of an agentic AI tool in a broad espionage campaign. Defense requires a new approach centered on preemptive exposure management, combining reinforced security fundamentals with defining the new AI attack surface and…
Cybersecurity Snapshot: What Security Pros Are Saying About Exposure Management, Risk Prioritization, Tool Sprawl and More
Want to take a peek at your fellow cybersecurity practitioners’ thoughts on topics such as exposure response, patch management, and security tool sprawl? In case you missed them, we’re revisiting some of our most insightful webinar polls of 2025. Check out what your peers had to say!
Navigating Australian Cybersecurity Regulations for Critical Infrastructure Operators
Australia's critical infrastructure leaders must master a complex array of regulations and frameworks, including the SOCI Act, SLACI Act, and AESCSF. The requirements call for board-level compliance, incident reporting, and bolstering OT cyber resilience against rising geopolitical threats.
Ce que vous ne voyez pas peut vous nuire : Vos outils de sécurité masquent-ils les risques réels ?
Avec des outils déconnectés créant des angles morts critiques, votre architecture de sécurité masque probablement plus de risques qu'elle n'en expose. Découvrez comment l'unification de vos données de sécurité en une vue unique révèle l'ensemble des risques et vous permet de vous concentrer sur l'essentiel.
Contactez notre équipe commerciale