Tenable OT Office Hours

Tenable OT office hours Q3 2024: Market updates, upcoming releases, and AI

In our Q3 2024 Tenable OT office hours, we review recent market trends and cyber threats targeting operational technology environments. We also explore new technology integrations, preview features coming in Tenable OT version 4.8, and demonstrate the power of AI with the new Cyber Agents Exchange.

[00:03:26] Recent OT cyber threats and market trends

We discuss recent cyber attacks on critical infrastructure and highlight actionable recommendations to reduce your cyber exposure.

• Targeted cyber attacks: Cyber threats are actively targeting internet-exposed OT devices, including water utilities and Siemens S7 controllers.
• Legacy controllers: Threat actors are leveraging AI-generated scripts to mimic legitimate engineering software and exploit legacy programmable logic controllers.
• Mitigation strategies: We recommend auditing internet-facing assets, hardening remote access, implementing network segmentation, and continuously monitoring alerts within Tenable OT.
• Free external attack surface audit: We offer an external attack surface audit using Tenable Attack Surface Management to help you passively identify any internet-exposed OT devices.

[00:09:04] New technology integrations

We highlight two upcoming integrations designed to expand your visibility and strengthen secure access controls.

• Asimily integration: A new integration brings visibility into Internet of Medical Things devices to complement Tenable OT coverage of traditional infrastructure systems.
• Secomea partnership: We provide an early look at our risk-based secure remote access integration with Secomea, which dynamically enforces user access based on your environment's risk profile.

[00:11:42] What is coming in Tenable OT 4.8

We preview new capabilities launching in Tenable OT version 4.8, designed to streamline vulnerability management, close visibility blind spots, and enhance network monitoring.

• Expanded asset support: The upcoming release introduces passive IPv6 monitoring and discovery for smart meters via IEC 62056 protocols, including policies to monitor denial of service activity.
• User interface redesign: An updated asset view side panel allows you to review details and perform bulk edits without navigating away from the main inventory page.
• OT agent enhancements: You can fully update the OT discovery agent remotely and check version compatibility matrices directly in the platform.
• Tenable Nessus import capabilities: You can import Tenable Nessus scan files directly into Tenable OT to close the visibility gap for IT devices operating in your OT networks.
• Privileged access management: The new version supports CyberArk integration, allowing you to leverage secure credentials for active querying.

[00:22:50] Open source Cyber Agents Exchange and AI

We announce the new open source Cyber Agents Exchange and demonstrate how AI is transforming vulnerability management and compliance reporting.

• Cyber Agents Exchange: We launched a vendor-agnostic, GitHub-powered platform that allows you to submit and share AI agents, skills, and playbooks.
• Model Context Protocol servers: You can use Model Context Protocol servers to allow large language models to natively query your Tenable OT system for insights.
• Automated AI reporting: We demonstrate how customized AI agents can automatically generate branded asset reports by querying Tenable OT directly, without exposing sensitive raw data to public language models.

[00:34:53] Upcoming events and Q&A

We wrap up with details on upcoming community events and answer a question regarding Tenable One licensing.

• OT Capture the Flag: We invite partners to join our virtual event on October 13th to test their skills in simulated network environments.
• Tenable One companion license: We clarify the process for requesting a Tenable Security Center companion license for on-premise reporting under the new Tenable One tiers.

Watch the Full Webinar