Sophos has announced the expansion of its Sophos Managed Risk capabilities with the introduction of Internal Attack Surface Management (IASM) with technology powered by Tenable.Read More…
Tenable has announced its intent to acquire Apex Security, an innovator in securing the rapidly expanding AI attack surface. Tenable believes the acquisition, once completed, will strengthen Tenable’s ability to help organizations identify and reduce cyber risk in a world increasingly shaped by artificial intelligence. Generative AI tools and autonomous systemsRead More…
Tenable has announced the recipients of its Global Partner Awards during Tenable AssureWorld — the company’s fifth annual virtual partner conference. Those honoured this year include IBM — Global System Integrator of the Year; Siemens Energy — Tenable OT Security Partner of the Year; Telefonica — MSSP Partner of the Year;Read More…
Tenable has announced the appointment of Eric Doerr as Chief Product Officer (CPO). Doerr brings nearly three decades of experience building and scaling security products at some of the world’s most respected technology companies, including Microsoft and, most recently, Google Cloud. At Tenable, Doerr will lead the company’s global product organisation,Read More…
Tenable has announced that its Board of Directors has unanimously appointed Steve Vintz and Mark Thurmond as co-Chief Executive Officers on a permanent basis. Following an extensive search process that considered both internal and external candidates, the Board concluded that Vintz and Thurmond are best positioned to move the company forward.Read More…
Tenable has uncovered a privilege escalation vulnerability in Google Cloud Composer (GCP) named ConfusedComposer. The vulnerability lets attackers with edit permissions in Cloud Composer to escalate privileges and gain access to a high-level service account with broad permissions across GCP. Cloud Composer uses Cloud Build, a fully managed continuous integrationRead More…
Tenable has identified a privilege escalation vulnerability in Google Cloud Run called ImageRunner. The vulnerability could have allowed attackers to bypass permissions, gain unauthorised access to container images and potentially expose sensitive data. Cloud Run, Google’s serverless container platform, uses a service agent with elevated permissions to pull private Google ContainerRead More…
Tenable has announced the release of its Cloud AI Risk Report 2025, which found that cloud-based AI is prone to avoidable toxic combinations that leave sensitive AI data and models vulnerable to manipulation, data tampering and data leakage. Cloud and AI are undeniable game changers for businesses. However, both introduce complexRead More…
