Forum Discussion
Tenable Product Update Newsletter - October 2026
Welcome to your monthly round-up of the latest Tenable product updates, platform enhancements, and community news. This month, we’re expanding visibility into AI agent identities, bringing OT assets into Tenable One, and adding enterprise-grade security vetting to the CyberAgents Exchange.
Tenable One - Platform Updates
Claude Mythos 5 is available in Tenable One with Adversary View
Tenable One Adversary View, powered by Claude Mythos 5, helps you detect previously unseen vulnerability chains based on adversarial reasoning to help you take decisive action faster than ever. Available for Tenable One customers with Tenable Hexa AI, Adversary View helps you:
- Reveal hidden attack paths by connecting non-obvious relationships between vulnerabilities that create real, exploitable chains — the kind no single rule can catch.
- Get evidence-backed recommendations with ranked remediation actions and the supporting evidence behind them, so your team knows exactly what to fix first.
- Act immediately with Tenable Hexa AI to turn Adversary View's recommendations directly into automated remediation workflows.
You can enable Adversary View in your Tenable One account by turning on Frontier AI models in Tenable Hexa AI settings.
Two new connectors bring Invicti and Chrome OS into Tenable One
Tenable One combines your third-party security tools with Tenable’s native sensor data for one view of risk across the entire attack surface. Two new connectors extend that reach to web application scanning and endpoint inventory: Invicti and Chrome OS.
- Invicti Connector: Brings Invicti’s dynamic application security testing (DAST) findings into Tenable One, ingesting scanned web applications along with their vulnerabilities and misconfigurations, complete with severity, Common Vulnerabilities and Exposures (CVE), and Common Vulnerability Scoring System (CVSS) data.
- Chrome OS Connector: Pulls managed Chrome OS device inventory straight from Google Workspace into Tenable One, including hardware identity, OS version, network identifiers, org-unit placement, enrollment lifecycle, and security hardware details.
CyberAgents Exchange
Build open-source security agents at SWARM Global, Nov. 2-6
SWARM Global is a free, virtual agentic AI build event, sponsored by Tenable with support from Anthropic, where security practitioners build open-source AI agents, skills, and MCP servers for real security workflows.
- Build solutions for workflows like alert triage, remediation orchestration, and executive reporting. Teams are one to three people, all skill levels are welcome, and there’s no travel or entry fee.
- Kickoff is on Nov. 2, followed by tutorials and office hours with Tenable engineers. Selected teams pitch live to Tenable and Anthropic judges on Nov. 5.
- $10,000 in Claude credits is split among first-, second-, and third-place teams. Winners also get a free pass to EXPOSURE 2027 and publication to the CyberAgents Exchange.
- Winners are announced in a live awards broadcast on Nov. 6, open to everyone, even if you don’t build.
Registration closes Nov. 1. Teams bring their own large language model (LLM) subscriptions, and all code must be open-sourced (MIT preferred), per the SWARM Global November 2026 Contest Official Rules.
Open-source AI agents, now with enterprise-grade security review
The CyberAgents Exchange AI Inspector now reviews select community-built listings on the CyberAgents Exchange and awards those that pass an “Exchange Inspector vetted” tag, further accelerating enterprise security adoption of open-source AI agents, skills, and Model Context Protocol (MCP) servers.
- Three-step review: Automated screening with Tenable One AI Exposure, frontier assessment by OpenAI GPT cyber models, and hands-on verification by Tenable security researchers.
- First vetted listings: SOC-Hunter, the Splunk Tenable Cloud Security Skill, and the Remediation Priority & Impact Agent
Built through Tenable’s participation in the OpenAI Daybreak Defense Network, the Exchange Inspector is the first major release from that collaboration. Everything on the Exchange stays free and open source.
Tenable One Vulnerability Management
Prioritize what matters: Top 25 Exploitable and Unsupported Exposures dashboard
When every finding feels critical, deciding where to focus your remediation is tough.
The Top 25 Exploitable and Unsupported Exposures dashboard helps you pinpoint active threats across your environment by organizing your highest-risk vulnerabilities, affected systems, and exact fix paths into a single view. Check out the new dashboard today.
Streamlined integration: OAuth support for Jira and ServiceNow
You can now connect to Jira and ServiceNow using OAuth authentication. This eliminates the requirement for admin-level accounts in your target tools, making it easier to comply with internal least-privilege policies and speed up integration sign-offs.
OAuth is an optional connection type. Your current integrations will continue working with zero disruption, allowing you to update your setup whenever your team is ready.
Tenable One Cloud Exposure
Get visibility into Microsoft Entra Agent ID identities
AI agents are being developed at a rapid pace and are becoming a new class of identities, giving security teams a way to see and govern them before they become a blind spot.
Tenable One Cloud Exposure now supports Microsoft Entra Agent ID identities by automatically discovering and tagging agent identity blueprints, their principals, agent identities, and agent users. Security teams can discover more, catch more excessive privileges, and examine blueprints. Now, you can see these identities next to your other non-human identities in Tenable One Cloud Exposure.
Why it’s important:
- Discovery and inventory: Auto-discovering and tagging each of the four object types, then listing them in the inventory, gives you a baseline of which agents exist and how they relate to each other.
- Permission and configuration auditing: Agents are often over-permissioned because it’s easier to grant broad access than to scope it tightly. Being able to inspect properties lets you catch excessive privileges, risky configurations, and ownerless agents.
- Hierarchy analysis and supply chain risk: Explorer queries let you trace blueprints to their agents (top-down) or agents back to their blueprints (bottom-up). That matters because one compromised or misconfigured blueprint, including one shared across tenants, passes the problem to every agent built from it.
Tenable One OT Exposure
Your OT and IT assets, one unified view
Our latest Tenable One OT Exposure release brings OT assets, findings, and policy violations into the Tenable One platform through an updated data pipeline. You get one place to see and manage exposure across your converged environment.
- View OT assets alongside IT assets in a single, unified view, with no need to switch between tools to understand your full attack surface.
- Apply asset tags and role-based access control to OT assets, so the right teams see the right data and can organize and prioritize work the way you already do for IT.
- Connect OT findings and policy violations with data from other Tenable products to get context to understand risk that spans IT and OT.
- Assets, findings, and policy violations now flow through the updated Tenable One data format and APIs, replacing the legacy pipeline.
- Fixes and performance improvements: A range of bug fixes and performance enhancements make day-to-day use smoother.
Update today to put these new capabilities to work in your environment.
Tenable Security Center
Simplified deployment for shared database environments
Our latest release delivers an enhanced database installer to ensure installation succeeds in environments with existing PostgreSQL schemas, reducing deployment complexity in shared database environments.
- Flexible PostgreSQL installation: The installer now handles non-empty public schemas that contain non-Tenable Security Center tables. This reduces deployment complexity and removes a common roadblock in shared database environments.
- Fixes for upgrades, scanning, and more: This release also includes bug fixes that improve upgrade reliability, scan accuracy, scan result cleanup, and query performance with certain HTTPS certificate configurations.
Update today to apply these new improvements to your environment.
Tenable Nessus
Tenable Nessus 10.12.5 focuses on plugin update security
Tenable Nessus 10.12.5 was released on Oct. 1, with a focus on strengthening how Tenable Nessus handles plugin updates. Here are the highlights:
- Stronger plugin security: Multiple conditions related to memory-safety and denial-of-service conditions in plugins have been addressed. Plugin archives pushed through the legacy update channel now require a valid Tenable signature before they are extracted or loaded.
- Scan policy import fix: An SQL injection vulnerability in the scan policy import functionality has been resolved.
- Signature file required for manual plugin updates: Manual plugin updates for Tenable Nessus and Tenable Nessus Manager now require the signature file. Tenable Security Center plugin updates, Tenable Nessus Manager’s agent plugin updates, and Tenable Nessus application updates are not affected. If you update plugins manually, such as in air-gapped environments, please ensure the signature file is a part of your process.
- New platform support: Tenable Nessus now supports AlmaLinux 10.
And much more. You can upgrade directly from any previously supported version. We recommend reviewing the notes for any versions you skip.
Tenable Patch Management
Intelligent rollbacks, expanded Linux coverage, and hardened platform security
You shouldn’t have to risk breaking critical applications just to keep your fleet secure. Rollbacks exist to restore stability, not rip out host applications and force a manual cleanup.
The latest release includes:
- Smarter rollbacks: Real-time client checks prevent destructive application removals during patch uninstalls.
- Expanded fleet support: Complete native coverage for Fedora 44 and Ubuntu 26.04 Long-Term Support (LTS).
- Hardened core infrastructure: Upgraded libraries (Tomcat, Log4j, Java Runtime Environment) and fortified client MSIs to secure token use and file access.
Tenable events and webinars
Customer office hours
These are recurring ask-me-anything sessions for Tenable Security Center, Tenable One Vulnerability Management, Tenable One Cloud Exposure, Tenable One Identity Exposure, and Tenable One OT Exposure. Time-zone-appropriate sessions are available for the Americas, Europe (including the Middle East and Africa), and Asia-Pacific.
Virtual events
- Tenable customer update - October 2026: Watch quarterly customer update session (on demand video coming soon!). This informative, fast-paced overview will explore how to better secure your expanding attack surface and consolidate critical security data. Products covered include Tenable One, Tenable One Vulnerability Management, Tenable Security Center, and Tenable Patch Management.
See all upcoming live and on-demand webinars
- Vetting open-source AI agents with OpenAI GPT cyber models: Join us at 11:30 a.m. ET, Wed., Oct. 28, on LinkedIn to learn how to review open-source AI agents, skills and MCP servers before you put them to work in real security workflows.
