Tenable Nessus Updates Enhance Vulnerability Management

Tenable announced significant updates to its flagship vulnerability assessment solution, Tenable Nessus. These enhancements focus on improving risk prioritization and compliance for organizations facing evolving threats and expanding attack surfaces.

Nessus now supports the latest industry standards, Exploit Prediction Scoring System (EPSS) and Common Vulnerability Scoring System (CVSS) v4. This allows security teams to filter and prioritize vulnerabilities based on the most up-to-date risk assessments, ensuring alignment with compliance requirements. Additionally, Tenable Vulnerability Priority Rating (VPR) leverages advanced data science to provide a deeper understanding of true risk by combining Tenable's proprietary data with third-party vulnerability and threat intelligence.

“Security teams are overwhelmed by a constant barrage of vulnerabilities,” said Shai Morag, Chief Product Officer at Tenable. “By integrating the latest scoring systems and our VPR technology, Nessus empowers them to focus on the vulnerabilities that pose the greatest risk to their specific environment, enabling them to address the critical few.”

The update also addresses challenges associated with offline vulnerability scanning. Nessus Offline Mode ensures the security of sensitive data by running only critical services during scans in air-gapped environments. This allows organizations to maintain a complete vulnerability picture even in disconnected networks.

Key features of the Tenable Nessus update include

• Support for EPSS and CVSS v4 scoring systems
• Enhanced offline scanning capabilities
• Declarative Agent Versioning for streamlined agent management

“These updates demonstrate Tenable’s commitment to providing security teams with the most effective tools to manage their exposure,” concluded Morag.