19 casos · pág. 1/1
Tenable describes how it moved Tenable One AI Exposure detectors (jailbreaks, prompt injection, harmful content, data exposure) from an English-centric "translate-then-detect" design to a single native multilingual model. The article is product and engineering news and reports no incident, vulnerability or threat actor activity. Tenable b…
Tenable published a vendor blog describing the "harness" behind Tenable Hexa AI, the agentic engine of the Tenable One Exposure Management Platform. The harness is a runtime control layer that treats LLM agents as untrusted insiders and enforces boundaries outside the model. The article covers failures seen in development, the "no standin…
Oracle released its October 2026 Critical Patch Update on October 20, the final quarterly update of the year. It delivers 1,295 security patches for 1,209 unique CVEs across 33 product families (tenable.com). The patch count is higher than the CVE count because one CVE can appear in several product matrices (gbhackers.com). 112 patches (8…
Dispel announced an integration between Tenable One OT Exposure and the Dispel Zero Trust Engine, its OT secure remote access platform. The integration feeds Tenable's real-time OT/IoT asset and vulnerability intelligence into every remote access decision. It is a product announcement with no vulnerability, incident or threat actor involv…
Tenable and OpenAI announced the CyberAgents Exchange AI Inspector (Exchange Inspector), a security review process for submissions to the open-source CyberAgents Exchange registry of AI agents, skills, MCP servers and multi-agent playbooks. The Inspector combines Tenable One AI Exposure scanning, OpenAI frontier models (Daybreak Blue and …
On September 15, 2026, Oracle released its Critical Security Patch Update (CSPU) for September 2026, with 673 security updates covering 672 unique CVEs across 17 product families. Of these, 104 issues (15.5%) are rated critical, 503 high, 59 medium and 7 low. Oracle E-Business Suite received the most patches (159, 23.6%), followed by Orac…
Tenable published a blog post, the first in its Cybersecurity Awareness Month series, on the security risks of workplace applications that non-technical employees ("citizen coders") build with generative AI tools. Such apps often bypass QA, testing and IT/security oversight, and become shadow AI assets with vulnerabilities, misconfigurati…
Tenable announced that Tenable One Cloud Exposure now brings Microsoft Entra Agent ID agentic AI identities into its unified asset and identity inventory. The post argues that treating AI agents as ordinary non-human identities (NHIs) is risky, because agents make non-deterministic, runtime decisions through LLMs, which makes baselining t…
Microsoft's October 2026 Patch Tuesday addresses 1,407 CVEs across 301 products and components, the largest release on record for the second consecutive month. 69 are rated critical, 1,337 important and 1 low. Two zero-days are fixed: CVE-2026-96951, a Windows Shell security feature bypass exploited in the wild, and CVE-2026-108398, a .NE…
Tenable has detailed the Exchange Inspector, a three-stage vetting process for community-contributed AI agents, skills, MCP servers and playbooks listed on the open-source CyberAgents Exchange. The process was developed through Tenable's participation in the OpenAI Daybreak Defense Network. Three listings have passed so far: two from Tena…
Tenable's Cybersecurity Awareness Month blog summarizes government guidance on defending critical infrastructure against nation-state and AI-assisted attacks. Per a joint US government advisory (published in April, updated in July), Iran-affiliated APT groups have attacked US water, energy and government facilities since Operation Epic Fu…
Infoblox published a vendor blog showing how its Model Context Protocol (MCP) Server lets AI assistants correlate Tenable vulnerability findings with Infoblox DNS, DHCP and IPAM data. In a lab, the author connected Claude Code to both platforms and ran three analyst-style workflows. These were risk-ranked asset triage, identity gap analys…
The Australian Signals Directorate (ASD) announced in June 2026 that it will replace the Essential Eight with an outcomes-based Essentials series. The series covers enterprise IT first, then cloud, OT and possibly agentic AI. This is a policy and compliance change, not a threat incident. It moves organizations from periodic, point-in-time…
Tenable Holdings announced that Japanese retail group H₂O Retailing has deployed the Tenable One Exposure Management Platform across its multi-cloud and hybrid infrastructure. The group operates Hankyu Hanshin Department Stores, Izumiya, Hankyu Oasis and Kansai Super. It previously relied on annual, outsourced vulnerability assessments fo…
Microsoft released updates fixing more than 1,400 vulnerabilities in Windows and other software, far above September's record of nearly 1,000 fixes. Only one flaw is a confirmed zero-day exploited in the wild: CVE-2026-96951, a security feature bypass in Windows Shell affecting Windows 10, Windows 11 and some Windows Server versions. At l…
CISA issued an alert on exploitation of critical zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway, noting confirmed malicious activity involving at least some of them. The alert references Citrix bulletins for CVE-2026-107406, CVE-2026-88779 and CVE-2026-88771 through CVE-2026-88778. Because NetScaler updates can be …
Microsoft released updates for at least 974 vulnerabilities in Windows and other software, its largest Patch Tuesday ever. The previous record was 570 fixes in July. The 2026 total now exceeds 2,600, more than double the 2020 record year (1,245), with three months still to go. Microsoft and other large vendors, including Adobe, Cisco, Goo…
Tenable Holdings announced Tenable OPEN for AI, an expansion of its Tenable Open Partner Exchange Network (OPEN) that provides validated AI workflows combining Tenable exposure intelligence with customers' preferred AI models, agents and tools. Launch partners include BeyondTrust, Cohesity, Command Zero, Corelight, Infoblox, Recorded Futu…
The PHP security team released emergency fixes on October 21, 2026 for two critical core flaws, CVE-2026-109618 and CVE-2026-109619, nicknamed PHP2Shell. Both are rated CVSS v4.0 9.2 and allow unauthenticated remote code execution (RCE) as the web worker account. They can also expose process memory that may hold credentials and API keys (…
