The Cyber Exposure Podcast

Welcome back to the Tenable Research Podcast. In this new episode we look back at June’s Microsoft patches, and ask Tenable staff research engineer Satnam Narang what he feels the reasons are for the number of patches generally decreasing both monthly and annually. 

We are also joined by director of product management Ray Carney, as we look into the increase of ransomware in 2021, what have been the causes of this increase, and what the threat landscape looks like currently. 

Show References:

https://www.tenable.com/blog/microsoft-june-2021-patch-tuesday-49-cves-cve-2021-31955-cve-2021-31956-and-cve-2021-33742 

https://www.tenable.com/blog/cve-2021-21985-critical-vmware-vcenter-server-remote-code-execution 

Follow along for more from Tenable Research:

Subscribe to the blog

Follow Tenable’s Zero Day team on Medium

After a looong absence, Bill and Gavin discuss Supply Chain Attacks and how Solarwinds personally impacted Gavin's slides. The chaps also talk through some pretty big additions to Tenable's Cloud capabilities with Frictionless Assessment.

It was a long summer and fall months; nevertheless, we are back at it. This is the "lost" episode and final for 2020. We will try to be more regular in 2021.

Happy New Year! & Stay Safe!

In this episode, Gavin and I discuss what we have been up to over the last several months as we'll discuss some major improvements/innovations here at Tenable.

Links:
https://www.tenable.com/blog

https://www.tenable.com/blog/research

In this episode Bill and Gavin discuss becoming more business aligned security leaders and how to influence change. 

In this episode Bill and Gavin are joined by Wei Tai from the Data Science team to discuss Machine Learning and how accurate the team have identified the major vulnerabilities of 2019. Bill also learns how to press the record button so the team don’t have to record the podcast for a third time in a week.

In this episode Bill and Gavin discuss predicting the vulnerabilities that matter most through machine learning and reducing the burden of patching the infrastructure.

In this episode Bill and Gavin discuss Nessus on Raspberry Pi, which unfortunately didn't make it through the rigorous testing processes, and the top vulnerabilities you should be patching to secure the remote workforce.

https://www.tenable.com/remote-workforce
https://www.tenable.com/blog/how-covid-19-response-is-expanding-the-cyberattack-surface

Also apologies if we offend anyone this week, we might be going a tad stir crazy which is affecting our (Gavin's) filter somewhat.

In this episode Bill and Gavin talk about protecting the new norm of the remote workforce and discuss CVE-2020-0796.

• Tenable SRT Blog https://www.tenable.com/blog/cyber-exposure-alerts
• Tenable Plugin list - https://www.tenable.com/plugins

In this episode Bill and Gavin discuss a presentation on the top 5 attack vectors in 2020 according to SANS.

Here’s a link to the video of the presentation Bill and Gavin are referencing:

https://www.youtube.com/watch?v=xz7IFVJf3Lk

New year, new format. Instead of the usual Olson mocking through the use of the latest cyber news, Bill and Gavin will be sharing some inner workings of team Tenable and what the dev are creating.

In this episode, Bill and Gavin talk about the innovation competition between dev teams and measuring the maturity of your assessment practices.