Anyone use Tenable and attempted looking into the CVE - Windows Package Manager (WinGet) < 1.30.80 Elevation of Privilege (CVE-2026-68821)? We have attempted installing the package, but its also installing SDKs and files we think are not necessary for a fresh install of Window Server.
Should we just wait for more info from MS in their MSRC articles?
Im looking for an older Version of the Nessus Agent installer (11.2.0.20301). Where i can i find them on the download page? Seems to be very hard to find.
hello hello.. im having a weird SSH issue and im running out of ideas
we have multiple servers using a tenable image across different VCNs and we added our SSH key during provisioning
initially SSH was asking for a password and i logged in through the tenable web interface, changed the default credentials, then checked the server and noticed the .ssh setup was missing so i created it, added our public key/user, fixed the permissions and after that SSH from our jump server worked fine for all servers except one (w new subnet)
for this one server SSH just hangs no password prompt no error
ssh -vvv stops here:
$ ssh -vvv <user>@10.x.x.x
OpenSSH_7.4p1, OpenSSL 1.0.2k-fips
debug1: Connecting to 10.x.x.x [10.x.x.x] port 22.
debug1: Connection established.
...
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_7.4
the interesting part is that SSH to the exact same server works from our PAM server!! but not from our jump server
the affected server is on a new subnet so im suspecting something network related, we checked the routing and it looks correct also checked the firewall but strangely we couldn’t see any traffic coming from the jump server
i ran sudo tcpdump -nn -i ens3 host <target_ip> and port 22 on the jump server while trying to SSH. the TCP connection gets established and the jump server sends a 21-byte packet (looks like the SSH client banner), but it keeps retransmitting it and gets no response back
i also tested MTU 1500 with ping -M do -s 1472 and got 0% packet loss
could this be asymmetric routing or some subnet/firewall/ACL issue specific to the path from the jump server?
Tenable already uses AI to release blog slop:
https://www.reddit.com/r/tenable/s/8ALL8L6Ri6
Why are they not leveraging AI for an actually useful purpose like plugin creation? I can't comprehend how they are so slow to release plugins. This is such an easy thing for Tenable to automate, but not easy for customers, since we don't have access to all the plugin source code (e.g., plugin 2841) and I don't see where the dependencies are open source verifiable for what is running on our instance (find_service1.nasl). Maybe I'm wrong about the second part, please correct me if so.
hello hello.. im having a weird SSH issue and im running out of ideas
we have multiple servers using a tenable image across different VCNs and we added our SSH key during provisioning
initially SSH was asking for a password and i logged in through the tenable web interface, changed the default credentials, then checked the server and noticed the .ssh setup was missing so i created it, added our public key/user, fixed the permissions and after that SSH from our jump server worked fine for all servers except one (w new subnet)
for this one server SSH just hangs no password prompt no error
ssh -vvv stops here:
$ ssh -vvv <user>@10.x.x.x
OpenSSH_7.4p1, OpenSSL 1.0.2k-fips
debug1: Connecting to 10.x.x.x [10.x.x.x] port 22.
debug1: Connection established.
...
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_7.4
the interesting part is that SSH to the exact same server works from our PAM server!! but not from our jump server
the affected server is on a new subnet, so im suspecting something network related we checked the routing and it looks correct also we checked the firewall, but strangely we couldn’t see any traffic coming from the jump server
since TCP/22 is showing connection established but the client never seems to receive the server’s SSH banner, im not sure what im missing here
could this be asymmetric routing or some subnet/firewall/ACL issue specific to the path from the jump server?
I just stumbled across Tenable's new blog today. It is pure AI slop. What the heck is the point of posting a blog article about AI written completely by AI and barely edited by this Blake Kizer guy? For Blake's name to be on it at all is embarrassing. Terrible article and pointless SLOP.
https://www.tenable.com/blog/testing-claude-mythos-preview-for-code-security-tenable
