Skip to main content

Topic

Tech News

Tanium Atlas page for Node2Shell / HTTP2Shell (CVE-2026-111497) showing a CVSS score of 9.2, patch availability, and counts of vulnerable endpoints, Node.js installs and Brotli packages

A critical flaw in Google's Brotli decoder (CVSS 9.2) can let a remote attacker crash or take over apps that decompress Brotli data. Update Node.js, Python Brotli and Bun now.

eMudhra CA Compromise: Find and Fix Your Exposure with Tanium

Private keys for eight eMudhra intermediate CAs can be calculated from their public certificates. Browsers block them once updated; most other software needs a trust store update.

PHP2Shell RCE vulnerability: CVE-2026-109618 and CVE-2026-109619

Two critical flaws in PHP core (CVSS 9.2) let an unauthenticated attacker run code with a crafted web request. Patch to 8.5.12, 8.4.27, 8.3.36 or 8.2.35 now.

Tanium and NVIDIA logos on a red background

This means the supercomputer is becoming a workstation, and the workstation is becoming something IT has never had to manage before.

Endpoints by Drift Score leaderboard in Tanium Atlas ranking endpoints by drift score, with platform, operating system, and the behavior driving each score

Attackers using stolen logins and your own admin tools won't trigger a single rule — Endpoint Drift notices when a machine stops acting like itself anyway.

Tanium Exposure Management dashboard showing CVE remediations available, open attack paths, and CVEs by CVSS severity and exploit maturity

Daily vulnerability findings across Tanium customer environments jumped from around 1 billion before mid-June 2026 to as high as 6 billion in September. Here is what is driving the surge and how to keep up.

Tanium and ServiceNow logos

Service Graph Connector for Tanium Atlas, now generally available in the ServiceNow Store, uses delta sync to keep your CMDB current.

Atlas chat showing the slash command picker with the hunt, investigate, and signal commands

With /hunt, /investigate, and /signal, Atlas turns a simple chat interaction into a guided SecOps workflow grounded in live endpoint state.

Agent-guided threat hunting in Tanium Atlas showing coordinated Threat Response alert clusters and AI-recommended next actions

Agentic SecOps changes the operating model: with Tanium Atlas, security teams can direct work in natural language, reason over live endpoint data, and keep humans in control.

Tanium’s Summer Intern Program: A Launch Pad to Leadership in Cybersecurity

A look at Tanium’s leading summer internship program – and why it’s a great option for students and professionals entering cybersecurity.

Tanium Atlas logo hero image

Tanium Atlas is generally available to every commercial and U.S. Government cloud customer. Here's what changes for the operators doing the work in an AI threat landscape, and why I wanted to write this one myself.

Featured image for Introducing Tanium External Attack Surface Management and Tanium Attack Path Mapping blog post

CVE volumes are climbing, AI-discovered threats are multiplying, and visibility across the full attack surface remains fragmented. Bolt-on solutions and manual handoffs simply can't keep pace. Organizations who are getting ahead share one thing in common: they've replaced fragmented workflows with AI-powered prioritization and autonomous remediation across a unified view of both internal and external risk.