Tenable

Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced that Tenable One Cloud Exposure has achieved FedRAMP® High and Impact Level (IL) 5 authorization, one of the U.S. government’s most stringent security certifications.

Tenable has long supported DoD cybersecurity through ACAS. Today agencies need more. This resource shows how Tenable extends visibility, prioritization and remediation across IT, OT, cloud and identity to support Zero Trust and mission readiness. Extend ACAS with unified visibility across IT, OT and cloud ACAS laid the foundation, but today’s threats span IT, OT and cloud. Tenable delivers continuous visibility, asset discovery and risk based prioritization aligned to RMF, STIGs and IAVM.

Over a 30 day period, Tenable detected 457 million AI-related security issues among 7,000-plus organizations, an average of 62,000 exposures per organization. If we didn’t already know that shadow AI was a problem, data like this makes it clear every organization needs to visualize, map, assess, and protect with a comprehensive exposure management program.

A stolen session cookie sat in underground markets for seven weeks before attackers used it to poison 32 Red Hat packages in the npm software registry, an example of the industrial approach behind modern supply chain attacks. Key takeaways Miasma is a self-propagating npm worm derived from Mini Shai-Hulud that TeamPCP open-sourced on May 12. The public release of the full weaponized toolchain means any operator can now replicate structurally identical supply chain campaigns.

Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced it is working with OpenAI as part of the OpenAI Daybreak Cyber Partner Program. The collaboration brings together OpenAI's frontier AI capabilities, including GPT-5.5, and Tenable's leadership in exposure management to help organizations better understand cyber risk, prioritize action and stay ahead of attackers through Tenable product and service workflows.

Oracle addresses 243 CVEs in its June 2026 Critical Security Patch Update with 245 patches, including 122 critical updates.

CISA’s new directive officially ends federal agencies’ reliance on static vulnerability scores. Learn how Tenable One helps federal agencies pivot to dynamic asset exposure, threat validation, and AI-powered automation to meet compressed compliance timelines.

Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced extended continuous security control and validation capabilities within the Tenable One Exposure Management Platform. With security control visibility and evidence-based, contextualized insights, Tenable One confirms which cyber exposures are truly accessible and exploitable for more precise prioritization and overall risk reduction.

Discover how continuous control validation in Tenable One can improve your CTEM program by filtering out alert noise and factoring in your active cyber defenses. Focus your team on accessible and exploitable attack paths. Key takeaways: With vulnerability exploitation ranking as the top initial access vector and frontier AI accelerating vulnerability discovery, organizations must shift from managing theoretical cyber risks to validating actual, accessible exposure.

CISA issued BOD 26-04, which replaces BOD 22-01 with a four-variable vulnerability prioritization model requiring federal agencies to patch the most dangerous vulnerabilities in as few as three days.