124 matches found
What I expect from IT Asset Inventory
The main problem of vulnerability management, in my opinion, is that it is not always clear whether we know about ALL network hosts existing in our infrastructure or not. So, not the actual process of scanning and the detection of vulnerabilities, but the lack of knowledge what we should scan...
QSC18 Virtual Edition: Vulnerability Risk Management
When vulnerability risk management is proactive, organizations don’t have to hurriedly react to attacks that exploit bugs for which patches are available, as happened with WannaCry. “The vast majority of WannaCry remediation took place as an emergency type process,” Jimmy Graham, a Qualys Directo...
QSC18 Virtual Edition: Global IT Asset Discovery, Inventory, and Management
Maintaining an IT asset inventory is essential for a strong security posture, but digital transformation has further complicated this already challenging task. “The volume and variety of assets, including cloud, virtualization, mobility and IoT, is disrupting IT, and security takes center stage,”...
GDPR Is Here: Assess the Security Configurations of Your IT Systems
In prior installments of this GDPR compliance blog series, we’ve discussed the importance of key security practices such as IT asset inventory and vulnerability management. Today, we’ll focus on another core component for GDPR: policy compliance. As we’ve stated before, to comply with the EU’s...
When Preparing for GDPR, Don’t Neglect Public Cloud Security
With organizations aggressively moving workloads to public cloud platforms, such as Amazon’s AWS, Google Cloud, and Microsoft’s Azure, protecting these environments is critical for compliance with the EU's General Data Protection Regulation GDPR. These public cloud platforms are being used to pow...
Implementing the CIS 20 Critical Security Controls: Slash Risk of Cyber Attacks by 85%
If a CISO needed to cut cyber attack risk by 85%, how would this security chief go about accomplishing that? Would the CISO even know where to begin? It’s safe to say that such a mandate would be considered daunting, and maybe even overwhelming. CISOs are scrambling to protect IT infrastructures...
OS Identification : OUI
This plugin attempts to identify the operating system by examining the MAC address OUI. C Tenable, Inc. include"compat.inc"; if description scriptid102821; scriptversion"2.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/06/23"; scriptnameenglish:"OS Identification : OUI";...
Countdown to GDPR: Get 20/20 Visibility Into Your IT Assets
Anyone questioning the importance of IT asset visibility in an organization’s security and compliance postures ought to review the EU’s General Data Protection Regulation GDPR, which goes into effect next year. With the severe requirements the GDPR places on how a business handles the personal da...
IT Asset Inventory Systems and CMDBs: A Marriage Made in InfoSec Heaven
A key capability of an IT asset inventory system is being able to exchange data with CMDBs Configuration Management Databases. In fact, a common misconception is that organizations with CMDBs don’t need an IT asset inventory system because their functions overlap. While they have similar roles,...
IT ITems DataBase Cross-Site Scripting Vulnerability
ITITems DataBase ITDB is a set of Web-based asset inventory management tools. A security vulnerability exists in ITITDB 1.23 and earlier versions, which originates when the "value" HTTP POST parameter is passed to the "itdb-1.23/js/DataTables-1.8.2/examples/examplessupport/editableajax.php" URL...
Sivann ITDB 'examples_support/editable_ajax.php' cross-site scripting vulnerability
Sivann ITDB is a web-based asset inventory management tool for storing information about assets in an office environment. A cross-site scripting vulnerability exists in Sivann ITDB 'examplessupport/editableajax.php'. Because user input is not validated, an attacker could exploit the vulnerability...
OPM Warned About Vulnerabilities, Governance Weaknesses
It’s hardly a surprise that the U.S. Office of Personnel Management OPM was targeted by nation-state hackers, given the sensitivity of the personal information the office stored. It’s also no shocker that OPM has been successfully infiltrated more than once given the state of its information...
AlienVault Releases Intrusion Detection Systems (IDS) Best Practices
Network security practitioners rely heavily on intrusion detection systems IDS to identify malicious activity on their networks by examining network traffic in real time. IDS are available in Network NIDS and Host HIDS forms, as well as for Wireless WIDS. Host IDS is installed via an agent on the...
Vulnerability Management: Think Like an Attacker to Prioritize Risks
Attackers care about ROI – they want to accomplish their objective with the least investment of time and resources possible. The same is true for you - to most effectively manage vulnerabilities, you need to think like an attacker. Ask yourself: How would you go about compromising systems,...
Juniper NetScreen VPN Client Detection
The remote host has the Juniper NetScreen VPN Client installed. C Tenable Network Security. Inc. include"compat.inc"; if description scriptid70120; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptxrefname:"IAVT", value:"0001-T-0914";...
ModSecurity Version
Based on HTTP headers, the remote host appears to be running ModSecurity, an open source web application firewall WAF. It was possible to read the version number from the banner. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67123; scriptversion"1.6";...
Adobe Extension Manager Installed
Adobe Extension Manager, used to add or remove extensions for applications in the Adobe Creative Suite, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62687; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...
Adobe Bridge Installed
Adobe Bridge is installed on the remote Windows host. Bridge is used to organize creative assets, and provide centralized access for applications in the Adobe Creative Suite. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62681; scriptversion"1.13";...