Forum Widgets
Recent Discussions
Our Tenable Patch Management October release is live
Automated data retention, expanded macOS coverage, and core platform hardening. Patch data piles up, storage fills up, and admins get stuck running manual database cleanup just to keep consoles responsive. Meanwhile, new operating system updates hit your endpoints whether your patching tooling is ready or not. Patch management shouldn't require you to babysit backend storage or build custom workarounds for new OS releases. The October release of Tenable Patch Management [v10.2.973.18] automates data retention, adds native metadata support for macOS 27, and upgrades core underlying libraries. Here is what you get in this release: Automated data retention: you can now configure Tenable Patch Management to purge stale patch records automatically. SaaS tenants default to a 180-day retention window, and on-prem administrators can define custom retention policies to prevent database bloat without writing custom maintenance scripts. Expanded macOS support: We added complete metadata support for macOS 27. You can pull these endpoints straight into your existing patch policies and deployment schedules today. Core platform hardening: A patching platform has to stay secure from the ground up. This release updates key libraries—including OpenSSL (3.6.4), Tomcat (9.0.122), and Langchain (1.20.0). We also cleared out operational bugs, including a reboot loop impacting Linux clients on comma-decimal locales and an issue where recurring maintenance windows could loop indefinitely. Upgrade Path SaaS / Cloud: Your environment is already updated. No manual action is required. On-Premise: Server administrators can pull the latest installer from the Tenable Downloads Portal today. Customer Resources Release version: 10.2.973.18 Release date: October 28, 2026 Changelog: View Release Notes Documentation: Tenable Patch Management complete documentation hub
[GA Release] – Tenable ServiceNow Apps Now Brazil Compatible!
Release Date: October 28, 2026 Download and Install/Upgrade: Service Graph Connector for Tenable Tenable for ITSM Documentation: ServiceNow Documentation What’s New: Tenable is excited to announce the General Availability for our ServiceNow applications. This release ensures full compatibility with the Brazil Platform Release. Key Enhancements: Optimized the "Pull Queries" scheduled job by adding a termination condition to prevent the job from getting stuck in a high-volume database polling loop and exhausting system resources. Updated the Service Graph Connector to ensure system serial numbers are properly mapped and processed where available. Added support for importing assets with over 100 IPv4 and MAC addresses, configurable via the x_tsirm_tio_now.max_mac_to_push property. Platform Compatibility: Tenable Products: Tenable Vulnerability Management, Tenable Security Center version 5.7 or later, Tenable OT Security ServiceNow releases: Brazil, Australia, Zurich, Yokohama, Xanadu Questions? We're here to help! Reach out to us at connect.tenable.com. Happy upgrading! — Ahmad Maruf Principal Product Manager, Ecosystem and Technical Alliance, Tenable[GA Release] Tenable Add-on for Splunk v8.0.4 Now Live!
Hi everyone! Tenable App for Splunk v8.0.4 is officially GA and available now on Splunkbase! Release Date: October 27, 2026 Download: Tenable Add-on for Splunk on Splunkbase (https://splunkbase.splunk.com/app/4060) Docs & User Guide: Tenable Add-on for Splunk Documentation (https://docs.tenable.com/integrations/Splunk/Content/SplunkAddOn.htm) What’s New? Updated the certifi library to version 2026.10.23. Compatibility Matrix: Browser: Google Chrome, Mozilla Firefox OS: Platform Independent Splunk Enterprise and Splunk Cloud version: 10.5.x, 10.4.x, 10.2.x, 10.0.x, and 9.4.x Supported Splunk Deployment: Splunk Cluster, Splunk Standalone, and Distributed Deployment Splunk Search Processing Language (SPL) version: SPL1 Known Issues and Limitations: None Questions or Feedback? Please submit them on Tenable Connect (connect.tenable.com). We’d love to hear from you. – Ahmad Maruf Tenable Ecosystem Product Management[GA Release] Tenable Add-on for Splunk v8.0.3 Now Live!
Hi everyone! Tenable App for Splunk v8.0.3 is officially GA and available now on Splunkbase! Release Date: October 1, 2026 Download: Tenable Add-on for Splunk on Splunkbase (https://splunkbase.splunk.com/app/4060) Docs & User Guide: Tenable Add-on for Splunk Documentation (https://docs.tenable.com/integrations/Splunk/Content/SplunkAddOn.htm) What’s New? Enhanced the saved searches to fix the issue of missing data in dashboards. Fixed the rebuildpluginlookups and rebuildvulnlookups custom commands. Splunk Cloud Compatibility (10.5.x) Compatibility Matrix: Browser: Google Chrome, Mozilla Firefox OS: Platform Independent Splunk Enterprise and Splunk Cloud version: 10.5.x, 10.4.x, 10.2.x, 10.0.x, and 9.4.x Supported Splunk Deployment: Splunk Cluster, Splunk Standalone, and Distributed Deployment Splunk Search Processing Language (SPL) version: SPL1 Known Issues and Limitations: None Note: We've also made Tenable App for Splunk (https://splunkbase.splunk.com/app/4061) fully Splunk Cloud (10.5.x) compatible. Version: 6.2.0 Questions or Feedback? Please submit them on Tenable Connect (connect.tenable.com). We’d love to hear from you. – Ahmad Maruf Tenable Ecosystem Product Management
Tenable VM API Change - Coming Jan 19, 2027
The “list_scans” API endpoint will be updated to enforce pagination on January 19, 2027. When this change occurs customers will need to be aware of the following: By default the number of returned scans will be limited to 200 The maximum number of returned scans will be limited to 5000 These are set by the “limit” integer in the API query Please see the attached announcement for full details.
Tenable Product Update Newsletter - October 2026
Welcome to your monthly round-up of the latest Tenable product updates, platform enhancements, and community news. This month, we’re expanding visibility into AI agent identities, bringing OT assets into Tenable One, and adding enterprise-grade security vetting to the CyberAgents Exchange. Tenable One - Platform Updates Claude Mythos 5 is available in Tenable One with Adversary View Tenable One Adversary View, powered by Claude Mythos 5, helps you detect previously unseen vulnerability chains based on adversarial reasoning to help you take decisive action faster than ever. Available for Tenable One customers with Tenable Hexa AI, Adversary View helps you: Reveal hidden attack paths by connecting non-obvious relationships between vulnerabilities that create real, exploitable chains — the kind no single rule can catch. Get evidence-backed recommendations with ranked remediation actions and the supporting evidence behind them, so your team knows exactly what to fix first. Act immediately with Tenable Hexa AI to turn Adversary View's recommendations directly into automated remediation workflows. You can enable Adversary View in your Tenable One account by turning on Frontier AI models in Tenable Hexa AI settings. Check out the technical documentation Explore the guided demo Two new connectors bring Invicti and Chrome OS into Tenable One Tenable One combines your third-party security tools with Tenable’s native sensor data for one view of risk across the entire attack surface. Two new connectors extend that reach to web application scanning and endpoint inventory: Invicti and Chrome OS. Invicti Connector: Brings Invicti’s dynamic application security testing (DAST) findings into Tenable One, ingesting scanned web applications along with their vulnerabilities and misconfigurations, complete with severity, Common Vulnerabilities and Exposures (CVE), and Common Vulnerability Scoring System (CVSS) data. Chrome OS Connector: Pulls managed Chrome OS device inventory straight from Google Workspace into Tenable One, including hardware identity, OS version, network identifiers, org-unit placement, enrollment lifecycle, and security hardware details. Learn more about the Invicti Connector Learn more about the Chrome OS Connector CyberAgents Exchange Build open-source security agents at SWARM Global, Nov. 2-6 SWARM Global is a free, virtual agentic AI build event, sponsored by Tenable with support from Anthropic, where security practitioners build open-source AI agents, skills, and MCP servers for real security workflows. Build solutions for workflows like alert triage, remediation orchestration, and executive reporting. Teams are one to three people, all skill levels are welcome, and there’s no travel or entry fee. Kickoff is on Nov. 2, followed by tutorials and office hours with Tenable engineers. Selected teams pitch live to Tenable and Anthropic judges on Nov. 5. $10,000 in Claude credits is split among first-, second-, and third-place teams. Winners also get a free pass to EXPOSURE 2027 and publication to the CyberAgents Exchange. Winners are announced in a live awards broadcast on Nov. 6, open to everyone, even if you don’t build. Registration closes Nov. 1. Teams bring their own large language model (LLM) subscriptions, and all code must be open-sourced (MIT preferred), per the SWARM Global November 2026 Contest Official Rules. Register today Join the Discord Open-source AI agents, now with enterprise-grade security review The CyberAgents Exchange AI Inspector now reviews select community-built listings on the CyberAgents Exchange and awards those that pass an “Exchange Inspector vetted” tag, further accelerating enterprise security adoption of open-source AI agents, skills, and Model Context Protocol (MCP) servers. Three-step review: Automated screening with Tenable One AI Exposure, frontier assessment by OpenAI GPT cyber models, and hands-on verification by Tenable security researchers. First vetted listings: SOC-Hunter, the Splunk Tenable Cloud Security Skill, and the Remediation Priority & Impact Agent Built through Tenable’s participation in the OpenAI Daybreak Defense Network, the Exchange Inspector is the first major release from that collaboration. Everything on the Exchange stays free and open source. Browse vetted listings Read the blog Read the full security review process Tenable One Vulnerability Management Prioritize what matters: Top 25 Exploitable and Unsupported Exposures dashboard When every finding feels critical, deciding where to focus your remediation is tough. The Top 25 Exploitable and Unsupported Exposures dashboard helps you pinpoint active threats across your environment by organizing your highest-risk vulnerabilities, affected systems, and exact fix paths into a single view. Check out the new dashboard today. Learn more Streamlined integration: OAuth support for Jira and ServiceNow You can now connect to Jira and ServiceNow using OAuth authentication. This eliminates the requirement for admin-level accounts in your target tools, making it easier to comply with internal least-privilege policies and speed up integration sign-offs. OAuth is an optional connection type. Your current integrations will continue working with zero disruption, allowing you to update your setup whenever your team is ready. Read the release notes Tenable One Cloud Exposure Get visibility into Microsoft Entra Agent ID identities AI agents are being developed at a rapid pace and are becoming a new class of identities, giving security teams a way to see and govern them before they become a blind spot. Tenable One Cloud Exposure now supports Microsoft Entra Agent ID identities by automatically discovering and tagging agent identity blueprints, their principals, agent identities, and agent users. Security teams can discover more, catch more excessive privileges, and examine blueprints. Now, you can see these identities next to your other non-human identities in Tenable One Cloud Exposure. Why it’s important: Discovery and inventory: Auto-discovering and tagging each of the four object types, then listing them in the inventory, gives you a baseline of which agents exist and how they relate to each other. Permission and configuration auditing: Agents are often over-permissioned because it’s easier to grant broad access than to scope it tightly. Being able to inspect properties lets you catch excessive privileges, risky configurations, and ownerless agents. Hierarchy analysis and supply chain risk: Explorer queries let you trace blueprints to their agents (top-down) or agents back to their blueprints (bottom-up). That matters because one compromised or misconfigured blueprint, including one shared across tenants, passes the problem to every agent built from it. Read the blog Read the product documentation Tenable One OT Exposure Your OT and IT assets, one unified view Our latest Tenable One OT Exposure release brings OT assets, findings, and policy violations into the Tenable One platform through an updated data pipeline. You get one place to see and manage exposure across your converged environment. View OT assets alongside IT assets in a single, unified view, with no need to switch between tools to understand your full attack surface. Apply asset tags and role-based access control to OT assets, so the right teams see the right data and can organize and prioritize work the way you already do for IT. Connect OT findings and policy violations with data from other Tenable products to get context to understand risk that spans IT and OT. Assets, findings, and policy violations now flow through the updated Tenable One data format and APIs, replacing the legacy pipeline. Fixes and performance improvements: A range of bug fixes and performance enhancements make day-to-day use smoother. Update today to put these new capabilities to work in your environment. Explore the release notes Tenable Security Center Simplified deployment for shared database environments Our latest release delivers an enhanced database installer to ensure installation succeeds in environments with existing PostgreSQL schemas, reducing deployment complexity in shared database environments. Flexible PostgreSQL installation: The installer now handles non-empty public schemas that contain non-Tenable Security Center tables. This reduces deployment complexity and removes a common roadblock in shared database environments. Fixes for upgrades, scanning, and more: This release also includes bug fixes that improve upgrade reliability, scan accuracy, scan result cleanup, and query performance with certain HTTPS certificate configurations. Update today to apply these new improvements to your environment. Explore the release notes Tenable Nessus Tenable Nessus 10.12.5 focuses on plugin update security Tenable Nessus 10.12.5 was released on Oct. 1, with a focus on strengthening how Tenable Nessus handles plugin updates. Here are the highlights: Stronger plugin security: Multiple conditions related to memory-safety and denial-of-service conditions in plugins have been addressed. Plugin archives pushed through the legacy update channel now require a valid Tenable signature before they are extracted or loaded. Scan policy import fix: An SQL injection vulnerability in the scan policy import functionality has been resolved. Signature file required for manual plugin updates: Manual plugin updates for Tenable Nessus and Tenable Nessus Manager now require the signature file. Tenable Security Center plugin updates, Tenable Nessus Manager’s agent plugin updates, and Tenable Nessus application updates are not affected. If you update plugins manually, such as in air-gapped environments, please ensure the signature file is a part of your process. New platform support: Tenable Nessus now supports AlmaLinux 10. And much more. You can upgrade directly from any previously supported version. We recommend reviewing the notes for any versions you skip. Read the release notes Review the Tenable Product Security Advisory (TNS-2026-17) Tenable Patch Management Intelligent rollbacks, expanded Linux coverage, and hardened platform security You shouldn’t have to risk breaking critical applications just to keep your fleet secure. Rollbacks exist to restore stability, not rip out host applications and force a manual cleanup. The latest release includes: Smarter rollbacks: Real-time client checks prevent destructive application removals during patch uninstalls. Expanded fleet support: Complete native coverage for Fedora 44 and Ubuntu 26.04 Long-Term Support (LTS). Hardened core infrastructure: Upgraded libraries (Tomcat, Log4j, Java Runtime Environment) and fortified client MSIs to secure token use and file access. Read the Connect post View the release notes Tenable events and webinars Customer office hours These are recurring ask-me-anything sessions for Tenable Security Center, Tenable One Vulnerability Management, Tenable One Cloud Exposure, Tenable One Identity Exposure, and Tenable One OT Exposure. Time-zone-appropriate sessions are available for the Americas, Europe (including the Middle East and Africa), and Asia-Pacific. Learn more and register Virtual events Tenable customer update - October 2026: Watch the quarterly customer update session - now on demand! This informative, fast-paced overview will explore how to better secure your expanding attack surface and consolidate critical security data. Products covered include Tenable One, Tenable One Vulnerability Management, and Tenable Patch Management. Watch on demand See all upcoming live and on-demand webinars Vetting open-source AI agents with OpenAI GPT cyber models: Join us at 11:30 a.m. ET, Wed., Oct. 28, on LinkedIn to learn how to review open-source AI agents, skills and MCP servers before you put them to work in real security workflows. Attend on LinkedIn Read Tenable documentation.
Get visibility into Microsoft Entra Agent ID identities
AI agents are being developed at a rapid pace and are becoming a new class of identities, giving security teams a way to see and govern them before they become a blind spot. Tenable One Cloud Exposure now supports Microsoft Entra Agent ID identities by automatically discovering and tagging agent identity blueprints, its principals, agent identities, and agent users, allowing security teams to discover more, catch more excessive privileges, and examine blueprints. Now, you can see these identities next to your other non-human identities in Tenable One Cloud Exposure. Why it’s important: Discovery and inventory: You can’t assess what you can’t see. Auto-discovering and tagging each of the four object types, then listing them in the inventory, gives you a baseline of which agents exist and how they relate to each other. Permission and configuration auditing: Agents are often over-permissioned because it’s easier to grant broad access than to scope it tightly. Being able to inspect properties lets you catch excessive privileges, risky configurations, and ownerless agents. Hierarchy analysis and supply chain risk: Explorer queries let you trace blueprints to their agents (top-down) or agents back to their blueprints (bottom-up). That matters because one compromised or misconfigured blueprint, including one shared across tenants, passes the problem to every agent built from it. Read the blog and check out the product documentation to learn more.
VPR Updates Ending for Tenable Security Center 6.4 and Earlier
Hi everyone! Please be aware Tenable Security Center 6.4 and earlier will no longer receive Vulnerability Priority Rating (VPR) updates, effective on November 1, 2026. What this means New plugins for new CVEs will not have a VPR score. VPR changes will not propagate to existing plugins. VPR scores that existed at the time of deprecation remain in the tool but are no longer refreshed. What to do Upgrade to a supported version of Security Center to continue receiving current VPR scores. Version 6.4 reached end of life on June 30, 2026. Questions about upgrading? Reply below or contact Tenable Support. -Team TenableExchange Inspector Is Now Live on the CyberAgents Exchange
“Is it safe to run?” That’s the question that can give security teams pause after they find a promising open source AI agent. Starting today, the CyberAgents Exchange AI Inspector (aka, “Exchange Inspector”) answers that. With the Exchange Inspector, select community-built AI agents, skills, MCP servers, and playbooks on the Exchange now carry the Exchange Inspector vetted tag — the highest level of security review a listing can receive. We built it through Tenable’s participation in the OpenAI Daybreak Defense Network, and it’s the first major release from that collaboration. To earn the tag, a listing has to clear three stages of enterprise-grade review: Stage 1: Automated screening with Tenable One AI Exposure. The skills-inspection engine parses the agent’s instructions, the tools it can invoke, and the data it can reach, then flags prompt injection, hidden instructions, hardcoded secrets, and risky data access. Stage 2: Frontier assessment by OpenAI GPT Cyber models. The models reason through the code and its threat model to surface novel attack techniques that signature-based checks miss. Stage 3: Hands-on verification by Tenable security researchers. Our team installs and runs the listing in a clean environment to confirm how it actually behaves, not just how it’s documented. Across those three stages, the review tests 15 types of security issues at three layers of the stack, from conventional flaws like SSRF and path traversal to agent-specific ones like excessive permissions and memory poisoning. Three listings already carry the Exchange Inspector vetted tag: SOC Hunter, the threat-hunting skill our own security team uses to cut hunt times by up to 75% Splunk Tenable Cloud Security Skill, built by Splunk for cloud posture investigation Remediation Priority & Impact Agent, which turns raw Tenable findings into a prioritized fix list Check out all of the open source AI security agents on the CyberAgents Exchange. Everything stays free and open source; no fees to list or use anything on it. Learn More Read the blog: Inside the Exchange Inspector: How Tenable uses OpenAI GPT cyber models to review open-source AI agents Browse the Exchange Inspector vetted listings Read the press release: Tenable Uses OpenAI GPT Cyber Models to Advance Agentic Security Review in the CyberAgents Exchange Learn more about the CyberAgents Exchange Security Review Process See Tenable One AI Exposure in action: request a demoOur Tenable Patch Management September release is live
Smarter rollbacks, broader Linux coverage, and uncompromising platform security. You expect your patching tool to resolve vulnerabilities, not create operational disasters. But when rolling back a patch rips out the entire host application, like Adobe Reader, you are left cleaning up the mess. We challenge the idea that rollback operations have to be risky. The September release of Tenable Patch Management [v10.2.973.13] is now available, delivering intelligent failsafes, expanded OS support, and hardened infrastructure. Here is what you get in this release: Intelligent, execution-time rollbacks: Uninstalling a patch should never compromise the underlying application. For software that notoriously removes the entire product during a rollback, we built execution-time discovery re-evaluation. Your client now actively checks the system state at the exact moment of execution, ensuring your rollback safely removes the patch without destroying the application you need to protect. Expanded Linux support: Your environment is complex; your patching strategy shouldn't be. You now have complete, native metadata support for Fedora 44 and Ubuntu 26.04 LTS. Bring these endpoints into your standard deployment workflows immediately. Uncompromising platform hardening: A patching engine must be bulletproof. We updated key underlying libraries, including Tomcat, Log4j, and JRE, and fortified the platform itself. We eliminated token reuse in client MSIs, locked down client log directories to prevent unauthorized file access, and resolved root TLS trust issues. We secure our platform so you can secure yours. Upgrade Path SaaS / Cloud: Your environment is already updated. No manual action is required. On-Premise: Server administrators can pull the latest installer from the Tenable Downloads Portal today. Customer Resources Release version: 10.2.973.13 Release date: September 23, 2026 Changelog: View Release Notes Documentation: Tenable Patch Management complete documentation hub
