Blog
Blog
Catch up on industry news, thought leadership, announcements, and more from Tanium.
Tanium Subscription Center
Get Tanium digests straight to your inbox, including the latest thought leadership, industry news and best practices for IT security and operations.
Security Update: Tanium’s Response to the Klue Breach that Allowed Data Exfiltration from Salesforce
Tanium's response to the Klue supply-chain breach that exposed Salesforce CRM data. Learn what happened, what information was involved, and how to stay safe.
Agentic AI security: Key challenges and how to address them
Agentic AI security protects autonomous AI systems that independently plan, reason, and execute multi-step actions across enterprise environments without continuous human oversight.
Risk-based vulnerability management explained
Risk-based vulnerability management (RBVM) is a cybersecurity methodology that prioritizes vulnerabilities based on actual business risk rather than technical severity scores in isolation. RBVM combines vulnerability severity, exploitation likelihood, threat intelligence, and asset criticality to focus remediation on the exposures most likely to be weaponized against your specific environment.
Mapping threats with Tanium Threat Navigator for faster response - Tanium Tech Talks #164
Threat hunting at enterprise scale gets a structured, repeatable workflow upgrade as Tanium Senior Threat Hunter Duncan Miller walks through Tanium Threat Navigator, a new capability inside Threat Response that transforms iterative hunts into shareable, actionable intelligence.
Governing AI-driven infrastructure: When AI handles 80% of the work, who owns the other 20%?
AI is reshaping DevOps and platform engineering by automating routine implementation work such as pipeline generation, container configuration, and assisting with Kubernetes issue resolution that once required deep hands-on expertise. The critical question for enterprise teams isn't whether AI can support this work, but whether humans still understand what actually occurred and have the right controls in place to catch problems before they propagate.
Is platform engineering just DevOps with a new name, or is something operationally different happening?
Platform engineering is the practice of building and maintaining a centralized internal developer platform (IDP), a curated set of tools, workflows, and self-service capabilities that application teams consume rather than configure on their own. It's a structural response to how DevOps practices evolve at scale, particularly when "you build it, you run it" introduces more cognitive load than individual development teams can sustainably manage.
Latest agentic AI developments and industry trends
A practitioner's guide to the capability shifts, framework changes, and regulatory developments reshaping how enterprise IT and cybersecurity teams govern, deploy, and defend against autonomous agents.
Critical Netlogon RCE on domain controllers (CVE-2026-41089)
A critical, unauthenticated remote code execution vulnerability in Windows Netlogon (CVE-2026-41089, CVSS 9.8) lets a remote attacker run code as SYSTEM on a domain controller. Patch all domain controllers in the same maintenance window with the May 2026 security updates.
Locked Shields and the OSI Model: Stop blaming the firewall
A back-to-basics walk through what blue teams actually defend at each layer, and why the unglamorous stuff (Layer 2, BGP) keeps deciding the scoreboard.
Mapping enterprise IT infrastructure with Tanium Atlas - Tanium Tech Talks #163
Tanium Senior Director of Product Management and Portfolio Lead Steven Yang walks through Tanium Atlas, an AI-driven experience that replaces fixed module navigation with natural language prompts, dynamic composable pages, and agentic workflows, fundamentally changing how IT and security teams interact with endpoint data.
Automated vulnerability remediation: A governance, validation, and rollout guide for enterprise teams
Automated vulnerability remediation uses policy-driven workflows to execute approved remediation actions, including patch deployment, software updates, and configuration changes, consistently across managed assets. Within a broader vulnerability management program, it helps teams close the gap between identifying an exposure and safely resolving it at scale.
What is vulnerability remediation?
Vulnerability remediation is the process of fixing and validating security flaws in systems, applications, or infrastructure using patches, configuration changes, or compensating controls after they are identified and prioritized.