Tenable Research Podcast

Tenable Research
  • 5.0 (3)
  • TECHNOLOGY

Join members of Tenable Research for a discussion about the latest vulnerabilities, exploits and cyber threats. Analysis, insights and guidance for information security and IT professionals who want to stay in the know.

  1. 11/08/2022

    Research Alliance Program - Shared Intelligence and Insight

    This month we talked to Tenable’s director of research product management Ray Carney and Eric Hoffman, director of partnerships and alliances at Greynoise, about the formation of a new research alliance program. Announced in mid October, this is intended to facilitate collaboration and information sharing between industry partners, and support best-practice coordinated vulnerability disclosure in order to promote increased cooperation in order to reduce an attacker's free time. Follow along for more from Tenable Research: Subscribe to the blogFollow Tenable's Zero Day team on Medium

    30 min

  2. 10/03/2022

    What is Exposed Externally That You’re Unaware Of, What Can Attackers See - and How to Manage Your Exposure

    After we discussed the concept of Exposure Management on our last podcast, this time we welcome back Tenable’s senior principal security advocate Nathan Wenzler to discuss the concept of how you can determine your level of exposure, what has led to this level of vulnerability, and what options are available to you to better manage this. Follow along for more from Tenable Research: Subscribe to the blogFollow Tenable's Zero Day team on Medium

    40 min

  3. 09/13/2022

    Understanding and Achieving Exposure Management

    The concept of Exposure Management has become more and more prominent in recent months, as users understand how much they are exposed to attack, how they can protect their assets and what it takes to achieve a level of compliance. In this podcast, we talk with Tenable’s senior principal security advocate Nathan Wenzler about the concept of Exposure Management, what it is, and what businesses need to do to adopt it.  Follow along for more from Tenable Research: Subscribe to the blogFollow Tenable's Zero Day team on Medium

    35 min

  4. 08/24/2022

    Reviewing 90 Day Responsible Disclosure Policies in 2022

    In the field of responsible disclosure, a policy of 90 days to publicly disclose vulnerabilities has been created by industry. This time period should allow the researcher to disclose the vulnerability to the recipient company, giving them time to push a fix out before the original flaw can be announced. However are we in a time where this time period still works? Some vulnerabilities can be fixed fairly rapidly as we work in cloud environments, while others can be more challenging to fix - such as in OT. We talked to Tenable’s Ivan Belyna and Nick Miles about the evolution of the 90 day policy, and its present and future, and what use advanced disclosure is to security leaders and to the wider industry.   Show References Tales of Zero-Day Disclosure white paper 2020 Podcast with Tenable's Zero-Day Team  Follow along for more from Tenable Research: Subscribe to the blogFollow Tenable's Zero Day team on Medium

    33 min

  5. 07/29/2022

    Unsophisticated Extortion - Reflecting on the LAPSUS$ Group

    In the first few months of 2022, the LAPSUS$ Group made a major splash in the cybersecurity headlines as it conducted a series of attacks on the likes of Nvidia, Microsoft and Okta. However a few months later, they had disappeared and arrests were reported soon afterwards. In a new blog, Tenable’s senior research engineer Claire Tills looked at the efforts of LAPSUS$ and what its motivations were, and how it is viewed now, and joins us on this podcast to discuss the extortion group further. Show References Brazen, Unsophisticated and Illogical: Understanding the LAPSUS$ Extortion Group Ransomware Ecosystem White Paper Download PageBlog on Understanding the Ransomware EcosystemWebinar on the Ransomware Ecosystem reportBBC News - Oxford teen accused of being multi-millionaire cyber-criminal Bleeping Computer news report on Okta attack  Follow along for more from Tenable Research: Subscribe to the blogFollow Tenable's Zero Day team on Medium

    22 min

  6. 07/08/2022

    Understanding the Ransomware Ecosystem

    Beyond the success of its impact, a lucrative criminal ecosystem has been developed for ransomware. This has seen ransomware-as-a-service (RaaS) creating an ecosystem utilizing multiple players, while the concept of double extortion has emerged, which involves exfiltrating data from victim organizations and publishing teasers about these breaches on the dark web. In this new edition of the Tenable Research podcast, we talk with senior staff research engineer Satnam Narang about a new white paper which explores the working of this ecosystem, how it works and what the economics of the model are. Show References Ransomware Ecosystem White Paper Download PageBlog on Understanding the Ransomware Ecosystem Webinar on the Ransomware Ecosystem report ContiLeaks: Chats Reveal Over 30 Vulnerabilities Used by Conti Ransomware  Follow along for more from Tenable Research: Subscribe to the blogFollow Tenable's Zero Day team on Medium

    29 min

  7. 05/23/2022

    BIG-IP and Microsoft Fixes and AWS Hot Patches

    This month we talk to Tenable research manager Scott Caveza about three recent patching stories, where F5 and Microsoft offered fixes in a regular cycle, and how Amazon Web Services released hot patches to repair earlier vulnerabilities in fixes for Log4J. F5 BIG-IP Patch Hot Patches for Log4J May Patch TuesdayCVE-2021-36942 Follow along for more from Tenable Research Subscribe to the blogFollow Tenable's Zero Day team on Medium

    24 min

  8. 05/13/2022

    The State of OT Security, a Year Since Colonial Pipeline

    On this edition of the podcast, we look at the conversation around operational technology (OT) and attacks on critical infrastructure, as we mark a year since the Colonial Pipeline incident. We’re joined by Tenable’s VP of operational technology Marty Edwards to talk about lessons learned, what work there is still to be done by practitioners, industry and researchers, and where the problems remain. Tenable blog - Securing Critical Infrastructure its Complicated  Amit Yoran Testimony Video of the Homeland Security Committee Joint Cybersecurity Advisory CBS News 60 Minutes Report  NCSC blog on Cyber Assessment Framework  Follow along for more from Tenable Research: Subscribe to the blogFollow Tenable's Zero Day team on Medium

    35 min
See All (37)

Ratings & Reviews

5
out of 5
3 Ratings

About

Join members of Tenable Research for a discussion about the latest vulnerabilities, exploits and cyber threats. Analysis, insights and guidance for information security and IT professionals who want to stay in the know.

Information

  • Creator
    Tenable Research
  • Years Active
    2020 - 2022
  • Episodes
    37
  • Rating
    Clean
  • Copyright
    © 2023 Tenable, inc.
  • Show Website
    Tenable Research Podcast