https://cybertoolchain.io/tools/tenable New releases and features in Tenable, tracked by The Cyber Toolchain. en Wed, 05 Aug 2026 12:45:00 GMT https://www.tenable.com/blog/tenable-hexa-ai-automating-exposure-remediation-with-agentic-routines https://www.tenable.com/blog/tenable-hexa-ai-automating-exposure-remediation-with-agentic-routines Wed, 05 Aug 2026 12:45:00 GMT Tenable Hexa AI automates exposure-to-patch remediation using intent-driven Routines with human approval guardrails. • Introduces Tenable Hexa AI, an agentic capability within Tenable One that automates the full remediation cycle — scoping, patch deployment, and verification — across integrated platforms such as Jamf. • Adds intent-driven Routines that encode the multi-step remediation workflow (asset scoping, policy targeting, patch execution, status check, re-scan confirmation) into a single automated sequence. • Enforces safety guardrails by binding AI autonomy strictly to defined user permissions within the Tenable One harness, with human approval gates before changes are applied. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/web-app-scanning/2026.htm#June252026 https://docs.tenable.com/release-notes/Content/web-app-scanning/2026.htm#June252026 Thu, 25 Jun 2026 00:00:00 GMT Tenable One Web App Scanning adds OAuth 2.0 auth type with Authorization Code, Client Credentials, and Device Code flows. • Adds `OAuth` as a selectable authentication type in scan credentials for supported web application targets • Supports three OAuth 2.0 flow options: `Authorization Code`, `Client Credentials`, and `Device Code` • Enables configurable session verification using response body pattern, header inspection, or HTTP response code within the new auth configuration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/identity-exposure/onprem/2026.htm#TenableOneIdentityExposure393520260623 https://docs.tenable.com/release-notes/Content/identity-exposure/onprem/2026.htm#TenableOneIdentityExposure393520260623 Tue, 23 Jun 2026 00:00:00 GMT Version 3.93.5 includes improvements to IoA time precision and deployment workflow support, along with numerous bug fixes for stability and accuracy. • Granular time filtering for Indicators of Attack (hour, minute, second) in syslog alerts. • New capability to retrieve `listenerLauncher.ps1` hash from the IoA deployment script for EDR whitelisting. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/OT-security/2026.htm#TenableOneOTExposure474420260623 https://docs.tenable.com/release-notes/Content/OT-security/2026.htm#TenableOneOTExposure474420260623 Tue, 23 Jun 2026 00:00:00 GMT Tenable One OT Exposure 4.7.44 adds centralized subnet management, IEC 61850 GOOSE detection, Yokogawa DCS activity visibility, air-gapped agent support, saved views, and TLS • Adds `MonitoredNetwork` types, `IemMonitoredNetworks`/`IemMonitoredNetworksRaw` Query fields, and bulk enable/disable Mutations for centralized enterprise subnet management. • Adds `GooseStream`, `GOOSEAnomalyDetails`, and `gooseStreamsByAssetId` Query field to expose IEC 61850 GOOSE traffic and anomaly details in the asset view. • Adds `PolicyEventType` values `YokogawaDcsStart`, `YokogawaDcsStop`, `YokogawaFunctionBlockChange`, `YokogawaSnapshotSave`, `YokogawaSnapshotLoad`, `YokogawaTagWrite`, and `YokogawaDcsStep` for Yokogawa Centum VP DCS activity detection. • Adds `OtdScan` and `OtdScanProfile` types, `otdScans`/`otdScanProfiles` Query fields, and `createOtdScan`/`downloadOtdScans` Mutations to support offline/scanned OT Agent deployments in disconnected environments. • Adds the `networkAreaId` field to `OtAgentDetails`, `SensorDetails`, `Mutation.editOtAgent`, and `Mutation.testAdHoc*Credentials` for centralized network area anchoring. • Adds `My Saved Views` capability allowing analysts to save, name, and reuse custom filter combinations across sessions. • Adds TCP with TLS support for Syslog forwarding by introducing `tlsEnabled: Boolean` and `caCert: String` arguments to `Mutation.newSyslogServer`, `Mutation.setSyslogServer`, and `testAdHocSyslogServer`, and `tlsEnabled`/`caCert` fields on the `SyslogServer` type. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/exposure-management/2026.htm#June112026 https://docs.tenable.com/release-notes/Content/exposure-management/2026.htm#June112026 Thu, 11 Jun 2026 00:00:00 GMT Tenable Exposure Management adds MITRE Heatmap JSON/CSV export and Security Controls visibility/filtering in Attack Path. • Adds `MITRE Navigator`-compliant `.json` export from the MITRE ATT&CK Heatmap tab for overlay in external tools • Adds CSV export from the MITRE ATT&CK Heatmap tab containing technique names, priorities, asset counts, and deep links • Surfaces detected EDR and firewall security controls data across Top Attack Techniques, Top Attack Paths, and Attack Path Graph • Adds Security Controls filter in Attack Path to scope investigations to paths with or without active coverage Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#June102026 https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#June102026 Wed, 10 Jun 2026 00:00:00 GMT Tenable One VM 2026 adds a new VM Custom Role with granular navigation and action-based RBAC toggles • Adds `VM Custom Role` to Tenable One Vulnerability Management for role-based access control (RBAC) • Enables navigation-based permissions by mirroring the UI navigation bar into permission settings • Provides granular toggles to enable or disable specific areas like scans, sensors, or reports • Introduces an action-based matrix allowing precise read vs. full write access with restricted actions removed from the UI Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#June92026 https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#June92026 Tue, 09 Jun 2026 00:00:00 GMT ASM findings (SSL/TLS, HTTP Metadata, WHOIS) now visible in Tenable Explore with filtering and grouping. • Surfaces External Attack Surface (ASM) findings directly in `Explore` alongside existing vulnerability data for Host and Web Application assets • Adds `SSL/TLS`, `HTTP Metadata`, and `WHOIS` finding subtypes to `Explore` with detailed attributes like cipher suites, security headers, and registrant details • Enables filtering, searching, and grouping of ASM findings in `Explore` using the same query builder as other finding types without running a scan Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/exposure-management/2026.htm#June42026 https://docs.tenable.com/release-notes/Content/exposure-management/2026.htm#June42026 Thu, 04 Jun 2026 00:00:00 GMT Tenable Exposure Management adds Full vs. Incremental sync modes and Remap Columns to Tenable One Open Connector • `Full Fetch` data update mode for `Tenable One Open Connector` fully overrides previous ingested data on every sync. • `Incremental Fetch` data update mode processes only new or updated records after an initial baseline. • Three `Incremental Fetch` delta modes: `Additive Only`, `Strict Inventory`, and `Dynamic Remediation` to handle absent records. • New `Remap Columns` option on the connector setup page to revise field mappings without re-uploading files. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#May272026 https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#May272026 Wed, 27 May 2026 00:00:00 GMT New 'Mixed' severity display and tooltip in Group By Plugin view for partial rule applications. • The Severity column in the `Group By Plugin` view now displays 'Mixed' for rows with findings at multiple severity levels due to partial recast or accept rule application. • Hovering over the 'Mixed' badge in the Group By Plugin view shows a tooltip listing each severity level and the count of findings at that level. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#May262026 https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#May262026 Tue, 26 May 2026 00:00:00 GMT Adds continuous assessment scanning support for Windows agents via Agent Profile settings. • `Enable Continuous Assessment Scan` option added to the `Agent Profile` menu for Windows hosts Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/exposure-management/2026.htm#May202026 https://docs.tenable.com/release-notes/Content/exposure-management/2026.htm#May202026 Wed, 20 May 2026 00:00:00 GMT Adds Recorded Future connector and license type selection for Microsoft TVM integration. • Introduces the `Recorded Future` connector to ingest third-party threat intelligence directly into the workflow. • Microsoft TVM connector now supports specific license types via `Cloud Environment` and `AuthentServer` configuration fields. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/exposure-management/2026.htm#May192026 https://docs.tenable.com/release-notes/Content/exposure-management/2026.htm#May192026 Tue, 19 May 2026 00:00:00 GMT Tenable Exposure Management GA release adds Tenable Hexa AI agentic engine with UI agents and MCP server. • `Tenable Hexa AI` agentic engine is generally available, enabling multi-step actions beyond chat-based Q&A. • New `Hexa UI` surface embedded in `Tenable One` platform provides out-of-the-box pre-built agents for asset management, visualization, configuration, risk adjustment, remediation, and attack path analysis. • New `Hexa MCP` server at `cloud.tenable.com/mcp/` exposes `Tenable`'s Exposure Data Fabric via Model Context Protocol for custom agent orchestration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#May192026 https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#May192026 Tue, 19 May 2026 00:00:00 GMT Tenable Hexa AI GA introduces pre-built agents and a hosted MCP server for agentic vulnerability management. • Adds `Hexa UI` pre-built agents for Contextual Asset Management, Dynamic Visualization, Assessment Configuration, Risk Adjustment, and Remediation Workflows embedded in Tenable One Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/exposure-management/2026.htm#May182026 https://docs.tenable.com/release-notes/Content/exposure-management/2026.htm#May182026 Mon, 18 May 2026 00:00:00 GMT Tenable Exposure Management adds Attack Path statuses, risk acceptance with audit log, and Inbox Zero workflow for APA lifecycle management. • `Attack Path Lifecycle Management` introduces `Technique Statuses` (`To Do`, `In Progress`, `In Review`, `Done`, `Accepted`) to track real progress on attack path techniques. • New `Intelligent Path Logic` automatically calculates Attack Path statuses, marking the entire path as `Chain Prevented` when a technique is marked `Done`. Breaking changes: • Existing 'User Archived' items are moved to the `Open` state with a status of `Accepted`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#May122026 https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#May122026 Tue, 12 May 2026 00:00:00 GMT Tenable One adds manual ticket creation from findings, automatic ticket closure, and continuous assessment scanning for Windows agents. • Adds the ability to manually create Jira or ServiceNow tickets directly from the Explore > Findings page • Adds automatic Jira or ServiceNow ticket closure when a finding reaches a fixed state • Adds an "Enable Continuous Assessment Scan" option in the Agent Profile menu for Windows agents to enable continuous software inventory monitoring Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#April282026 https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#April282026 Tue, 28 Apr 2026 00:00:00 GMT Tenable One VM 2026 adds an AI Aware filter for findings. • Adds `AI Aware` button on the Findings page in Explore to automatically filter findings where Plugin Family is equal to Artificial Intelligence Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#April272026 https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#April272026 Mon, 27 Apr 2026 00:00:00 GMT Tenable One Vulnerability Management adds the capability to use VPR for risk scoring in settings. • Allows selecting Vulnerability Priority Rating (VPR) as the primary severity metric via General Settings Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/OT-security/2026.htm#TenableOneOTExposure463420260416 https://docs.tenable.com/release-notes/Content/OT-security/2026.htm#TenableOneOTExposure463420260416 Thu, 16 Apr 2026 00:00:00 GMT Tenable One OT Exposure 4.6.34 adds bulk subnet management, Nessus credential mode, and new GraphQL mutations/fields. • `Monitored Networks` page added with `bulkAddMonitoredNetwork` mutation for bulk subnet configuration • `Mutation.editNessusUserScan` and `Mutation.newNessusUserScan` gain `credentials` and `credentialsMode` arguments (type `NessusUserScanCredentialsMode`) to control credential usage in active scans • GraphQL API adds `Config.otAgentAutoUpdate` field, `OtAgentAction.RollbackUpdate` enum value, and `OtAgentSelectField.autoInstallUpdates`, `scoutAvailableVersion`, `scoutBackupAvailable`, `scoutBackupVersion`, `scoutCheckedForUpdatesTs`, `scoutUpdatedTs` for remote agent update management • GraphQL API adds `Query.monitoredNetworks` and `Query.monitoredNetworksRaw` fields plus `Mutation.addMonitoredNetwork`, `deleteMonitoredNetworks`, `disableMonitoredNetwork`, `enableMonitoredNetwork`, and `editMonitoredNetwork` for subnet lifecycle control Breaking changes: • `PolicyFindingFilterField` replaced `DetailedPolicyFindingField` as the type for input fields `PolicyFindingsExpressionsParams.field`, `PolicyFindingsSortParams.field`, `PolicyFindingsSortParamsComplexFields.field`, `RawPolicyFindingsComplexFieldParams.field`, `RawPolicyFindingsComplexFieldParamsComplexFields.field`, `RawPolicyFindingsComplexGroupingParams.field`, and `RawPolicyFindingsComplexGroupingParamsComplexFields.field`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/exposure-management/2026.htm#April152026 https://docs.tenable.com/release-notes/Content/exposure-management/2026.htm#April152026 Wed, 15 Apr 2026 00:00:00 GMT Tenable Exposure Management 2026 adds automated AWS S3 ingestion via Open Connector Phase 2 and a PrismaCloud CSPM connector. • Adds automated pull from AWS S3 buckets to the Tenable One Open Connector (Phase 2) for continuous, scheduled data pipelines of asset and vulnerability data • Adds availability of the PrismaCloud CSPM Third-Party Connector to ingest cloud resources and security findings directly into Tenable Exposure Management Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/identity-exposure/onprem/2026.htm#TenableOneIdentityExposure3771720260408 https://docs.tenable.com/release-notes/Content/identity-exposure/onprem/2026.htm#TenableOneIdentityExposure3771720260408 Wed, 08 Apr 2026 00:00:00 GMT Tenable One Identity Exposure 3.77.17 enables Security Profile customizations during initialization and post-login • Enables Security Profile customizations by providing necessary infrastructure data during initialization and post-login. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#March312026 https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#March312026 Tue, 31 Mar 2026 00:00:00 GMT Adds passkey support for user authentication to replace traditional passwords • Enables configuring passkeys in account settings for phishing-resistant sign-in Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/attack-surface-management/2026.htm#March312026 https://docs.tenable.com/release-notes/Content/attack-surface-management/2026.htm#March312026 Tue, 31 Mar 2026 00:00:00 GMT Users can now set a default inventory for automatic loading. • Adds ability to designate a default inventory by selecting the star icon next to an inventory name Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/exposure-management/2026.htm#March262026 https://docs.tenable.com/release-notes/Content/exposure-management/2026.htm#March262026 Thu, 26 Mar 2026 00:00:00 GMT Tenable Exposure Management adds full Attack Path export (CSV/JSON), API access, and AWS/Azure AI service mapping • Adds global export button for Attack Path Top Paths and Top Attack Techniques supporting CSV and JSON output formats with granular scope selection • Enables programmatic extraction of Attack Path data via the Tenable Public API for SIEM/SOAR integration • Adds discovery and visualization support for AWS AI services (Amazon Bedrock, SageMaker) and Azure AI services (Azure Cognitive Services, Azure Machine Learning) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#March42026 https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#March42026 Wed, 04 Mar 2026 00:00:00 GMT Tenable One adds OT Discovery with a dedicated scan template and non-intrusive scanning toggle to map industrial assets without disrupting processes. • Tenable One adds OT Discovery with a dedicated scan template and non-intrusive scanning toggle to map industrial assets without disrupting processes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/security-center/2026.htm#TenableSecurityCenter680ReleaseNotes2026218 https://docs.tenable.com/release-notes/Content/security-center/2026.htm#TenableSecurityCenter680ReleaseNotes2026218 Wed, 18 Feb 2026 00:00:00 GMT Asset Repository consolidation, per-host scan timeouts, VPR LLM insights, and Delinea/CyberArk integration enhancements. • Consolidates IPv4, IPv6, Agent, and Universal repositories into a single `Asset` repository type that can target any data including agent, network scan, and passive data. • Adds `Scan Per-Host Timeout` configuration in advanced scan policies to prevent single hosts from increasing overall scan time. • Introduces AI-Driven Insights for VPR using Large Language Model (LLM) explanations of exposure significance, weaponization, and mitigation guidance. • Adds `Delinea Secret Server` auto-discovery feature that removes the requirement to manually add specific targets to a scan. • Adds `Delinea Authentication Method` API key support for the Delinea integration. • Enables BeyondTrust Password Safe and Delinea integrations to retrieve database credentials from the safe. • Adds CyberArk Vault options to query credentials with advanced parameters (`Get credential by > Parameters`) or fetch separate passwords by username, including `Get Escalation Credential By` for escalation credentials. Breaking changes: • Upgrade requires adding an ed25519 key for authorization to successfully sync remote repositories; synchronization will fail without it. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/identity-exposure/saas/2026.htm#TenableOneIdentityExposure311320260218 https://docs.tenable.com/release-notes/Content/identity-exposure/saas/2026.htm#TenableOneIdentityExposure311320260218 Wed, 18 Feb 2026 00:00:00 GMT Tenable One Identity Exposure 3.113 adds IoE detection for dynamic AD objects and a new health check reason in Domain Installation • Adds IoE detection and monitoring of dynamic objects within Active Directory to identify misconfigurations. • Adds a new `Multiple Tenable IoA GPO EVT Subscribe Listener files exist in the SYSVOL` reason in the Domain Installation health check to flag duplicate listener configurations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/exposure-management/2026.htm#February172026 https://docs.tenable.com/release-notes/Content/exposure-management/2026.htm#February172026 Tue, 17 Feb 2026 00:00:00 GMT Tenable Exposure Management 2026 February adds hybrid GCP attack path linking and exploitable CVE-only mapping. • Attack Path now links on-prem JSON credential files to GCP Service Accounts for hybrid lateral movement detection. • Attack Path maps paths exclusively for verified exploitable CVEs using TVDB V3 intelligence, purging non-exploitable noise. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/identity-exposure/onprem/2026.htm#TenableOneIdentityExposure3771620260203 https://docs.tenable.com/release-notes/Content/identity-exposure/onprem/2026.htm#TenableOneIdentityExposure3771620260203 Tue, 03 Feb 2026 00:00:00 GMT Tenable One Identity Exposure 3.77.16 adds Attack ID column for IoA events and resource monitoring logging for on-premises deployments. • Adds unique `Attack ID` to the dedicated column in the IoA page for all detected IoA attacks. • Adds resource monitoring logging for on-premises deployments under Relay & Ceti monitoring. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#February22026 https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#February22026 Mon, 02 Feb 2026 00:00:00 GMT Unified Asset Classification naming aligns VM and Exposure Management terminology. • Renames 'Device Class' to 'Asset Category' for asset classification in the UI • Renames 'Device Subclasses' to 'Asset Function' for asset classification in the UI • Unifies profile confidence labels under 'Categorization Confidence/Drivers' across platforms Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/exposure-management/2026.htm#January282026 https://docs.tenable.com/release-notes/Content/exposure-management/2026.htm#January282026 Wed, 28 Jan 2026 00:00:00 GMT New Orca Security connector, Open Connector for static file ingestion, multi-tenant Tenable One aggregation, and dashboard widget drill-down capabilities • Adds `Orca Security` third-party connector to ingest assets and findings from agentless platform • Introduces `Tenable Open Connector` (Phase 1) for manual ingestion of asset and vulnerability data via static file upload (CSV, JSON) • Enables connecting multiple distinct `Tenable One Vulnerability Management` accounts into a single workspace for centralized risk assessment • Adds `Widget Drill Down` capability allowing click-through from dashboard widgets to `Assets` or `Findings` Inventory pages with persistent filtering • Adds `Dashboard Grid Mode` with toggleable gridlines and `Snap to Grid` alignment in the dashboard creator/editor Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#January272026 https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#January272026 Tue, 27 Jan 2026 00:00:00 GMT Adds global Plugin Download Concurrency settings and Agent Profile CPU Utilization Controls • Adds `Plugin Download Concurrency` global setting for linked Tenable Nessus scanners to limit simultaneous plugin downloads • Adds `Plugin Download Concurrency` global setting for linked Tenable Agents to limit simultaneous plugin downloads • Adds `CPU Utilization Controls` setting to agent profiles to configure maximum CPU percentage used by agents on Windows or Linux Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#January232026 https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#January232026 Fri, 23 Jan 2026 00:00:00 GMT New Tenable Data Stream Finding Enriched Attributes stream exports manual risk adjustments and host audit overrides to AWS S3. • Adds the `Finding Enriched Attributes` stream to Tenable Data Stream for exporting manual risk adjustments (recasts, acceptances) and host audit result changes to an AWS S3 bucket in JSON format. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#January222026 https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#January222026 Thu, 22 Jan 2026 00:00:00 GMT Adds FedRAMP Moderate availability for mobilization services with bi-directional Jira Cloud and ServiceNow ticket creation via Exposure Response initiatives. • Adds FedRAMP Moderate availability for mobilization services in Tenable One Vulnerability Management. • Enables automatic or manual bi-directional ticket creation via Exposure Response initiatives, synchronizing security findings with Jira Cloud or ServiceNow. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#January132026 https://docs.tenable.com/release-notes/Content/vulnerability-management/2026.htm#January132026 Tue, 13 Jan 2026 00:00:00 GMT Adds Plugin Download Concurrency settings and CPU Utilization Controls to agent profiles. • Adds two global settings for **Plugin Download Concurrency** (one for linked Tenable Nessus scanners, one for linked Tenable Agents) to manage simultaneous plugin download rates • Adds **CPU Utilization Controls** setting to agent profiles in the UI to configure max CPU percentage for Windows or Linux hosts Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/exposure-management/2026.htm#January82026 https://docs.tenable.com/release-notes/Content/exposure-management/2026.htm#January82026 Thu, 08 Jan 2026 00:00:00 GMT Adds ORDR third-party connector for OT asset and findings data ingestion • Enables configuration of the new ORDR connector within the `Connectors` section of Tenable Exposure Management Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/OT-security/2025.htm#TenableOneOTExposure455420251218 https://docs.tenable.com/release-notes/Content/OT-security/2025.htm#TenableOneOTExposure455420251218 Thu, 18 Dec 2025 00:00:00 GMT Adds dynamic asset tagging, IEC 61850 support, Genetec VMS integration, and EM role sync to OT Exposure. • Adds rule-based dynamic asset tagging using filters like type, risk score, or criticality • Adds automatic synchronization of Enterprise Manager (EM) ICP-Access user groups for role-based access control • Adds Saved Filters functionality on the Inventory, Findings > Vulnerability, and Findings > Policy Violations pages • Adds Resource Center section within Enterprise Manager interface • Adds support for passive detection and classification of IEC 61850 protocol traffic for electrical substation visibility • Adds new compliance dashboard mapping for IEC 62443-3-3 and NIST-CSF frameworks • Enables viewing Tenable One OT Exposure policy violations directly within Tenable Security Center dashboards • Adds infrastructure support for feature flags to enable or disable specific features dynamically • Adds Genetec Video Management System (VMS) integration via Remote API • Adds filtering on Asset ID field across Asset Inventory and Findings interfaces Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/exposure-management/2025.htm#December162025 https://docs.tenable.com/release-notes/Content/exposure-management/2025.htm#December162025 Tue, 16 Dec 2025 00:00:00 GMT New ServiceNow ITSM ticketing integration for automated remediation workflows in Tenable Exposure Management. • Adds automatic ticket creation for data mobilization via a new ServiceNow ITSM integration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/identity-exposure/saas/2025.htm#TenableOneIdentityExposure310920251210 https://docs.tenable.com/release-notes/Content/identity-exposure/saas/2025.htm#TenableOneIdentityExposure310920251210 Wed, 10 Dec 2025 00:00:00 GMT Attack Path queries now enforce a 3-minute timeout with shortest-path fallback • Attack Path queries between two nodes time out after three minutes and revert to the shortest path if they exceed that limit. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/vulnerability-management/2025.htm#December102025 https://docs.tenable.com/release-notes/Content/vulnerability-management/2025.htm#December102025 Wed, 10 Dec 2025 00:00:00 GMT New Read-Only role and custom roles for Tenable Exposure Management in RBAC update • Adds a `Read-Only` role to Tenable Exposure Management that restricts users to viewing and drilling down into data without affecting it. • Adds a new custom role capability for Tenable Exposure Management to consolidate access controls into a single location. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/exposure-management/2025.htm#December102025 https://docs.tenable.com/release-notes/Content/exposure-management/2025.htm#December102025 Wed, 10 Dec 2025 00:00:00 GMT New Read-Only and custom RBAC roles with tag enforcement and Inventory section disablement in Tenable Exposure Management. • Adds a new `Read-Only` role for viewing and drilling down into data without affecting it, scrubbing action-related elements from the UI • Introduces a new custom role for consolidating access across different areas within Tenable Exposure Management for granular control • Enables tag enforcement allowing tags created in Tenable Exposure Management to be available on the Permissions page in Tenable One Vulnerability Management • Adds ability to disable the `Inventory` navigation item, removing its widget from the Home page and related fields/tabs from Asset Details Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/security-center/2025.htm#TenableSecurityCenter672ReleaseNotes2025128 https://docs.tenable.com/release-notes/Content/security-center/2025.htm#TenableSecurityCenter672ReleaseNotes2025128 Mon, 08 Dec 2025 00:00:00 GMT Tenable Security Center 6.7.2 adds improved upgrade workflow for non-critical failures and requires manual IP range entry for DNS assets in offline universal repositories. • Allows non-critical upgrade failures to complete with a warning and in-product instructions instead of aborting • Requires manual entry of the IP range when editing an offline universal repository to enable DNS assets after upgrading from 6.6.x or earlier Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/vulnerability-management/2025.htm#December42025 https://docs.tenable.com/release-notes/Content/vulnerability-management/2025.htm#December42025 Thu, 04 Dec 2025 00:00:00 GMT New Jira Cloud integration in Exposure Response enables bi-directional ticket synchronization • Adds initial release of Mobilization services with Jira Cloud ticketing integration for Tenable One Vulnerability Management Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/exposure-management/2025.htm#December42025 https://docs.tenable.com/release-notes/Content/exposure-management/2025.htm#December42025 Thu, 04 Dec 2025 00:00:00 GMT Initial release of mobilization services for Tenable Exposure Management, starting with Jira Cloud integration to create tickets from findings. • Initial release of mobilization services for Tenable Exposure Management, starting with Jira Cloud integration to create tickets from findings. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/vulnerability-management/2025.htm#December32025 https://docs.tenable.com/release-notes/Content/vulnerability-management/2025.htm#December32025 Wed, 03 Dec 2025 00:00:00 GMT Adds configurable session timeouts (5 min to 12 hrs) per user and query-based dynamic asset tagging in Explore • Allows admins to configure session timeouts from 5 minutes to 12 hours when creating or updating users. • Enables converting existing Explore > Assets queries into dynamic tags. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/exposure-management/2025.htm#December32025 https://docs.tenable.com/release-notes/Content/exposure-management/2025.htm#December32025 Wed, 03 Dec 2025 00:00:00 GMT New Claroty xDome OT connector and in-dashboard widget editing for Tenable Exposure Management • Adds the `Claroty xDome` third-party connector to pull asset and findings data from OT devices • Enables direct editing of built-in and custom widget configuration parameters (Widget Type, Categories, Values, Data Labels, Stacking, Filters) within dashboards Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/identity-exposure/onprem/2025.htm#TenableOneIdentityExposure3771520251126 https://docs.tenable.com/release-notes/Content/identity-exposure/onprem/2025.htm#TenableOneIdentityExposure3771520251126 Wed, 26 Nov 2025 00:00:00 GMT Tenable One Identity Exposure 3.77.15 adds granular time filtering for Indicators of Attack. • Introduces granular time filtering to Indicators of Attack, allowing specification of hour, minute, and second via the `attacksFilters[0].dateStart` and `attacksFilters[0].dateEnd` parameters in the URL. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/identity-exposure/saas/2025.htm#TenableOneIdentityExposure310820251126 https://docs.tenable.com/release-notes/Content/identity-exposure/saas/2025.htm#TenableOneIdentityExposure310820251126 Wed, 26 Nov 2025 00:00:00 GMT Tenable One Identity Exposure 3.108 adds IoE-specific explanation paragraphs and time-based Syslog alert URLs • Adds dedicated paragraphs for each Indicator of Exposure (IoE) reason in Dangerous Kerberos Delegation findings to explain reported issues and fixes more clearly. • Enables `IOA_url` key in Syslog alerts with a time-based URL linking directly to incident details in Tenable One Identity Exposure. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/attack-surface-management/2025.htm#November202025 https://docs.tenable.com/release-notes/Content/attack-surface-management/2025.htm#November202025 Thu, 20 Nov 2025 00:00:00 GMT Tenable One ASM adds Top-Level Domain (TLD) as a configurable source via the new UI. • Adds support for adding Top-Level Domains (TLDs) as a source in the new user interface of Tenable One Attack Surface Management, allowing one TLD to be added at a time Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/identity-exposure/saas/2025.htm#TenableOneIdentityExposure310720251113 https://docs.tenable.com/release-notes/Content/identity-exposure/saas/2025.htm#TenableOneIdentityExposure310720251113 Thu, 13 Nov 2025 00:00:00 GMT Tenable One Identity Exposure 3.107 introduces renamed Dangerous Kerberos Delegation indicators and improved shadow credential descriptions for SaaS users. • Enhances accuracy and clarity of Dangerous Kerberos Delegation Indicators of Exposure by updating names such as 'Unsafe Permissions on Resource-Based Constrained Delegation (RBCD) Attributes' and 'Dangerous Kerberos Unconstrained Delegation'. • Updates descriptions for Shadow Credential indicators including 'Permitted Trustees List' and 'Permitted Trustees List (by Group Membership)' to provide clearer explanations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable https://docs.tenable.com/release-notes/Content/attack-surface-management/2025.htm#November32025 https://docs.tenable.com/release-notes/Content/attack-surface-management/2025.htm#November32025 Mon, 03 Nov 2025 00:00:00 GMT Tenable One Attack Surface Management now allows users to customize visible columns in the new Explore and Asset Inventory pages. • Tenable One Attack Surface Management now allows users to customize visible columns in the new Explore and Asset Inventory pages. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/tenable