One of my neighbors at a recent neighborhood Christmas party noted that he was facing a security vulnerability stress test this week. I told him that I received as many press releases relating to security for the past year as for any other single technology issue.
Speaking of security, Tenable has sent a couple of pieces of news. They have added Patch Management and Focused Vulnerability Prioritization.
Tenable Adds Patch Management
Tenable announced the release of Tenable Patch Management, an autonomous patch solution built to quickly and effectively close vulnerability exposures in a unified solution. A strategic partnership and integration with Adaptiva, a global leader in autonomous endpoint management, provides the foundation of the solution.
The integrated solution pairs autonomous patch functionality from Adaptiva with Tenable’s vulnerability coverage, built-in prioritization, threat intelligence and real-time insight to empower organizations to close the loop on vulnerability exposure through automated correlation of vulnerabilities to available patches. With Tenable Patch Management organizations shorten the time from discovery to remediation by knowing the most impactful vulnerabilities across their environments, exposing priority gaps and taking rapid, decisive action to close critical exposures.
Tenable Patch Management mobilizes teams to take action against vulnerabilities with full control to determine when, how and where a patch is deployed. Organizations can autonomously patch with confidence, with customizable controls and automatic patch testing that blocks problematic updates from going out.
Available as an add on in Tenable One, Tenable Vulnerability Management, Tenable Security Center and Tenable Enclave Security, Tenable Patch Management includes:
- Automated correlation between vulnerabilities and available patches, helping teams overcome the bottleneck that occurs between prioritization and remediation.
- Automated patching with customizable controls and approval management capabilities, giving IT admins the ability to define and edit specific approval settings and real-time control of deployment actions, including targeted or global pausing, canceling, rolling back patches and applying precise controls like version management and product exceptions.
- Automatic validation enables teams to easily confirm that a remediation was successful following the subsequent scan.
- Monitor compliance status to align with company policy, while providing leadership with easy-to-use metrics that can be shared with executives.
Tenable Security Center Delivers Focused Vulnerability Prioritization
Tenable announced new vulnerability intelligence, risk prioritization and web application scanning features for Tenable Security Center, the world’s #1 vulnerability management solution managed on-premises.
Tenable Security Center identifies, investigates and prioritizes vulnerabilities, providing customers with a risk-based view of their security and compliance posture for their on-premises environments. Equipped with Tenable Vulnerability Intelligence, organizations have contextualized vulnerability data at their fingertips to effectively know, expose and close their critical vulnerabilities. Now available in Tenable Security Center, the curated database streamlines processes, providing enhanced visibility and threat context necessary to close critical risk.
Additional new features available in Tenable Security Center include:
- Threat Landscape Overview – Multiple curated categories provide a unique way to proactively surface threats that warrant further review by highlighting Common Vulnerabilities and Exposures (CVE) currently being exploited, actively being used in ransomware campaigns, in the news and others of importance. Selecting a category brings up details on the category, the vulnerabilities associated with it and affected assets.
- Natural Language and Advanced Search – Search for a specific CVE by number or common name and review distilled vulnerability information. Advanced search enables teams to build queries by combining criteria, such as Common Vulnerability Scoring System (CVSS) metrics, key drivers of the Tenable Vulnerability Priority Rating (VPR) and other Tenable Research metadata.
- Expanded Web Application Scan Scaling – In a single Security Center console, support thousands of web applications and fully qualified domain names (FQDN), manage large web environments with ease, reduce hardware needs and minimize complexity for faster and more efficient scanning.
- Support for CVSSv4 and EPSS – Prioritize vulnerabilities using the latest CVSSv4 and EPSS models.
