Loading story…
Tenable published a security advisory addressing critical vulnerabilities in Tenable Security Center affecting versions 6.6.0 through 6.8.0, prompting a warning from the Canadian Centre for Cyber Security. The notice directs administrators to review Tenable’s advisory and apply updates to exposed systems, with the Cyber Centre emphasizing prompt remediation for affected deployments.
A stand-alone patch, SC202607.1, is available for Tenable Security Center versions 6.6.0, 6.7.2, and 6.8.0. The advisory fits a broader pattern of ongoing Tenable product security updates across its portfolio, but the immediate issue is the remediation of critical flaws in Security Center that could leave unpatched instances at significant risk.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
On July 20, 2026, Tenable published a security advisory addressing critical vulnerabilities in Tenable Security Center versions 6.6.0 through 6.8.0. The advisory referenced stand-alone patch SC202607.1 for versions 6.6.0, 6.7.2, and 6.8.0.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
4 references tracked. Mallory keeps watching after this page renders.
malware.news
Open sourcecyber.gc.ca
Open sourcetenable.com
Open sourcetenable.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Tenable released security advisories for multiple products, including vulnerabilities in **Tenable Security Center** version `6.8.0` and earlier and an **arbitrary file deletion** flaw affecting **Nessus Agent** and **Nessus**. The Canadian Centre for Cyber Security urged organizations to review Tenable's advisories and apply vendor updates to reduce exposure across affected deployments. For Security Center, Tenable directed customers on versions `6.5.1`, `6.6.0`, `6.7.2`, and `6.8.0` to apply the stand-alone security patch `SC202604.1`. For the file deletion issue, affected versions include **Nessus Agent** before `11.1.3` and **Nessus** before `10.11.4` and `10.12.0`; Tenable identified `11.1.3`, `10.11.4`, and `10.12.0` as fixed releases. Administrators were advised to update promptly and verify product versions across vulnerability management infrastructure.
Jun 29, 2026
The Canadian Centre for Cyber Security issued multiple **alerts and advisories** urging organizations to apply vendor patches for newly disclosed vulnerabilities across widely deployed enterprise platforms, including **Splunk** (Enterprise, Cloud Platform, Universal Forwarder, and *DB Connect* prior to `4.2.0`), **GitHub Enterprise Server** (patched releases `3.19.2`, `3.18.5`, `3.17.11`, `3.16.14`, `3.15.18`, `3.14.23`), **Jenkins** (Weekly `2.550` and prior; LTS `2.541.1` and prior), and **Atlassian** products (**Bamboo**, **Confluence**, and **Crowd** Data Center/Server across multiple versions). The advisories are framed as patch-and-mitigate guidance rather than incident reporting, emphasizing rapid update adoption to reduce exposure. Additional vendor guidance highlighted kernel-level risk and security tooling exposure. **Tenable** released a critical update for **Tenable Security Center** (`6.7.2` and prior) via stand-alone patches, and **Red Hat** published multiple advisories (Feb 9–15) including **Linux kernel** fixes across several RHEL-related offerings (e.g., *Red Hat Enterprise Linux* and *CodeReady Linux Builder*). Separately, F5 tracked a **Linux kernel vulnerability** identified as **CVE-2025-22026** in its product advisory, reinforcing the need to prioritize kernel patching where affected components are present.
Jun 29, 2026
The Canadian Centre for Cyber Security issued multiple advisories urging organizations to apply vendor patches released between **February 16–22, 2026**, including updates addressing **Linux kernel vulnerabilities** impacting **Ubuntu** (16.04 LTS through 25.10) and **Red Hat** platforms (including *RHEL* and related offerings). The advisories emphasize routine but potentially high-impact exposure from unpatched kernel flaws across widely deployed enterprise and server environments, and direct administrators to review upstream vendor notices and deploy the corresponding updates. Separate Cyber Centre advisories also flagged patch requirements outside the Linux kernel: Microsoft released an update for **Microsoft Edge Stable** to remediate vulnerabilities in versions prior to `145.0.3800.70`, IBM published security advisories covering multiple products (including *Aspera Enterprise WebApps*, *Cloud Pak System*, *Storage Defender*, and others), and CISA issued ICS advisories for vulnerabilities across several industrial and IoT/OT products (including **Delta Electronics**, **GE Vernova**, **Honeywell CCTV**, **Siemens Simcenter**, and others) with recommended mitigations and updates where available. A Linux 7.0 release-candidate feature article is not a security advisory and does not materially relate to the patch/vulnerability notices in the other items.
Jun 29, 2026