FedSearch - Federated network search engine

#Tenable #Nessus Plugin ID 171859 triggers on current up to date Windows installs, and requires #curl to be updated to version 7.88.0 or later. Microsoft is only offering 7.83.1. The issue here is that this appears to be triggering to orgs implementing #IAVA policy (this likely includes many defense and other critical sectors orgs). So currently it seems that many systems are flagged non-compliant without clear recourse.

https://www.tenable.com/plugins/nessus/171859 https://en.wikipedia.org/wiki/Information_assurance_vulnerability_alert

#tenable #nessus #curl #iava

Last updated 3 years ago

Original post

mauvehed 🐿️ · @mauvehed

495 followers · 127 posts · Server defcon.social

Does anyone know of any vulnerability management tool that actually allows you to generate your own CVSS? To the best of my knowledge neither Rapid7 nor Tenable do this. CVSS, while problematic, does contain scoring for Temporal and Environmental, but I haven't seen a product that lets you actually input your own meta data to adjust the score for your business.

#Security #BlueTeam #VulnMgmt #VulnerabilityManagement #CVSS #Risk #RiskScoring #Rapid7 #Tenable #CVE

#security #blueteam #vulnmgmt #vulnerabilitymanagement #cvss #risk #riskscoring #rapid7 #tenable #cve

Last updated 3 years ago

Original post

ITSEC News · @itsecbot

1122 followers · 33173 posts · Server schleuss.online

Microsoft Patch Tuesday, January 2023 Edition - Microsoft today released updates to fix nearly 100 security flaws in its Windows o... https://krebsonsecurity.com/2023/01/microsoft-patch-tuesday-january-2023-edition/ #microsoftbitlocker #latestwarnings #cve-2023-21563 #cve-2023-21674 #cve-2023-21678 #cve-2023-21743 #cve-2023-21745 #cve-2023-21762 #securitytools #dustinchilds #satnamnarang #timetopatch #tenable

#tenable #timetopatch #satnamnarang #dustinchilds #securitytools #cve #latestwarnings #microsoftbitlocker

Last updated 3 years ago

Original post

Scott Wilson :verified: · @bscottwilson

86 followers · 131 posts · Server infosec.exchange

@frankmcg Frank, you may have already seen this on https://status.tenable.com/... There appears to be an issue on the US5A instance; "INC-923: Intermittent Bulk Vulnerability and Asset Export Failures"... #Tenable #cloud

#tenable #cloud

Last updated 3 years ago

Original post

Tenable Research · @tenable

18 followers · 1 posts · Server infosec.exchange

Our researcher, Jimi Sebree, published a #blog post detailing his planned submission for #Pwn2Own looking into the #NETGEAR Nighthawk RAX30 AX2400 Router. Unfortunately, NETGEAR released a last minute update, which invalidated his submission. Read more on the #Tenable Techblog: http://bit.ly/3FpYbHF

#blog #pwn2own #netgear #tenable

Last updated 3 years ago

Original post

rye · @rmaloley

75 followers · 127 posts · Server infosec.exchange

Argh Tenable why is your licensing and plugin service so finicky.
---
[debug] Error fetching feed information: [502] <html>
<head><title>502 Bad Gateway</title></head>
<body>
<center><h1>502 Bad Gateway</h1></center>
<hr><center>nginx</center>
</body>
</html>
[error] Nessus Plugins: Did not get a 200 OK response from the server: HTTP/1.1 502 Bad Gateway
---

It's hard to do my job when I can't activate my core tools.

#tenable #nessus #linux #pentesting

Last updated 3 years ago

Original post