Microsoft Patch Tuesday, July 2022 Edition

Microsoft today released updates to fix at least 86 security vulnerabilities in its Windows operating systems and other software, including a weakness in all supported versions of Windows that Microsoft warns is actively being exploited. The software giant also has made a controversial decision to put the brakes on a plan to block macros in Office documents downloaded from the Internet. Continue reading Microsoft Patch Tuesday, July 2022 Edition

Microsoft fixes exploited zero-day in Windows CSRSS (CVE-2022-22047)

The July 2022 Patch Tuesday is upon us and has brought fixes for 84 CVEs in various Microsoft products, including an actively exploited zero-day: CVE-2022-22047, an elevation of privilege bug in Windows’ Client/Server Runtime Subsystem (CSRSS). &… Continue reading Microsoft fixes exploited zero-day in Windows CSRSS (CVE-2022-22047)

Microsoft Patch Tuesday, June 2022 Edition

Microsoft on Tuesday released software updates to fix 60 security vulnerabilities in its Windows operating systems and other software, including a zero-day flaw in all supported Microsoft Office versions on all flavors of Windows that’s seen active exploitation for at least two months now. On a lighter note, Microsoft is officially retiring its Internet Explorer (IE) web browser, which turns 27 years old this year. Continue reading Microsoft Patch Tuesday, June 2022 Edition

Tenable closes acquisition of Bit Discovery and announces new solution to reduce cyber risk

Tenable announced it has closed its acquisition of Bit Discovery, a provider of external attack surface management (EASM). Tenable will launch Tenable.asm, a new solution that will provide the full capabilities of Bit Discovery’s technology and enable … Continue reading Tenable closes acquisition of Bit Discovery and announces new solution to reduce cyber risk

Tenable adds Terrascan to Nessus to enable secure cloud application delivery

Tenable announced Nessus now includes Terrascan, an open-source cloud security analyzer that helps developers secure Infrastructure as Code (IaC). The integration into Nessus continues to further Tenable’s broader cloud strategy, helping enterprises se… Continue reading Tenable adds Terrascan to Nessus to enable secure cloud application delivery

Microsoft Patch Tuesday, May 2022 Edition

Microsoft today released updates to fix at least 74 separate security problems in its Windows operating systems and related software. This month’s patch batch includes fixes for seven “critical” flaws, as well as a zero-day vulnerability that affects all supported versions of Windows. Continue reading Microsoft Patch Tuesday, May 2022 Edition

Microsoft patches Windows LSA spoofing zero-day under active attack (CVE-2022-26925)

May 2022 Patch Tuesday is here, and Microsoft has marked it by releasing fixes for 74 CVE-numbered vulnerabilities, including one zero-day under active attack (CVE-2022-26925) and two publicly known vulnerabilities (CVE-2022-29972 and CVE-2022-22713). … Continue reading Microsoft patches Windows LSA spoofing zero-day under active attack (CVE-2022-26925)

Tenable acquires Bit Discovery to help organizations minimize cyber exposure

Tenable Holdings announced that it has signed an agreement to acquire Bit Discovery, a provider of external attack surface management (EASM). Combining Tenable’s Cyber Exposure solutions with Bit Discovery’s EASM capabilities will provide customers wit… Continue reading Tenable acquires Bit Discovery to help organizations minimize cyber exposure

Industry leaders launch OT Cyber Coalition to protect critical infrastructure from growing threats

A diverse group of cybersecurity leaders joined together to launch the Operational Technology Cybersecurity Coalition (OT Cyber Coalition). Founding members include Claroty, Forescout, Honeywell, Nozomi Networks, and Tenable, each with decades of exper… Continue reading Industry leaders launch OT Cyber Coalition to protect critical infrastructure from growing threats