“Tenable continues to extend its established vulnerability management offerings into exposure management with its Tenable One platform,” according to the report.
Big news: Tenable has been named a Leader in The Forrester Wave™: Unified Vulnerability Management Solutions, Q3 2025. We believe it’s recognition of what our customers and partners already know — Tenable is setting the standard for the future of preemptive security.
The report gave us the highest possible score in the strategy category and in the roadmap criterion, which we see as acknowledgement of what we’ve been saying for years: you need a new approach to cybersecurity, one that can keep up with your complex environments and the continual threats you face.
Unified Vulnerability Management is “a solution that serves as the primary book of record for all organizational vulnerabilities and improves and facilitates remediation workflows.”
— The Unified Vulnerability Management Solutions Landscape, Q1 20251, Forrester Research Inc
In this 2025 Wave, Forrester evaluated 10 vendors across 19 criteria. Tenable earned the highest possible score (5.0) in seven criteria:
Forrester defines Unified Vulnerability Management as “a solution that serves as the primary book of record for all organizational vulnerabilities and improves and facilitates remediation workflows.”1
Unified vulnerability management addresses the challenges you face in dealing with a fragmented array of security tools and the complications that arise as you try to prioritize your vulnerability response efforts.
Why this mattersTraditional vulnerability management can’t keep up with today’s threat landscape. Security teams are buried in data, juggling disconnected tools and drowning in nonstop alerts. What’s needed is a new approach, one that delivers continuous visibility, deep context and decisive action. That’s exactly what Tenable provides.
Access The Forrester WaveTM: Unified Vulnerability Management Solutions, 3Q 2025
At Tenable, we believe unified vulnerability management is the natural evolution of traditional vulnerability management and is the bridge to full-fledged, proactive exposure management. It’s how you get ahead of attackers instead of always playing catch up.
Recognition of our visionThe Forrester report recognizes where we are — and where we’re going. It says: “Tenable continues to extend its established vulnerability management offerings into exposure management with its Tenable One platform. Tenable’s 2025 acquisition of Vulcan Cyber will enhance Tenable’s support for third-party vulnerability data.”
This isn’t just a roadmap, it’s a reality. In May, we introduced the first set of new Tenable One Connectors, making it easier than ever to unify data from across your security silos — including vulnerability management, cloud security, endpoint security, operational technology (OT) and internet of things (IoT) security, application security, configuration management databases (CMDBs) and more — alongside your native Tenable findings.
Built for now. Designed for what’s next.To us, Tenable’s placement as a leader in this report reflects more than product features. It reflects a strategy that is already helping our customers shift from reactive patching to proactive risk reduction.
According to the Forrester report, “Tenable’s vision considers how proactive security teams will need new strategies to address attackers’ evolving techniques over the next three to five years. Its strategy is complemented by a strong roadmap that includes expanding remediation and response capabilities, with a significant focus on remediation orchestration.”
We believe this long-term thinking, paired with a proven record of innovation, is why Tenable was ranked highest in the strategy category. We are honored by this recognition and, more importantly, we are proud to deliver value that helps our customers protect what matters most.
Learn more
1The Unified Vulnerability Management Solutions Landscape, Q1 2025, Forrester Research Inc., March 14, 2025.
Forrester does not endorse any company, product, brand, or service included in its research publications and does not advise any person to select the products or services of any company or brand based on the ratings included in such publications. Information is based on the best available resources. Opinions reflect judgment at the time and are subject to change. For more information, read about Forrester’s objectivity here.
Researchers have uncovered a sophisticated phishing campaign zeroing in on Turkish enterprises, with a particular focus on the defense and aerospace industries. Threat actors are masquerading as Turkish Aerospace Industries (TUSAŞ), a key defense contractor, to disseminate malicious emails that mimic legitimate contractual documents. These emails carry a variant of the Snake Keylogger, an infamous […]
The post Snake Keylogger Uses Persistence via Scheduled Tasks to Steal Login Data Undetected appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
A critical configuration flaw in Microsoft’s AppLocker block list policy has been discovered, revealing how attackers could potentially bypass security restrictions through a subtle versioning error. The issue centers on an incorrect MaximumFileVersion value that creates an exploitable gap in Microsoft’s application control framework, highlighting the importance of precise security policy implementation in enterprise environments. […]
The post Microsoft’s AppLocker Flaw Allows Malicious Apps to Run and Bypass Restrictions appeared first on Cyber Security News.
A single compromised password brought down KNP Logistics, putting 730 employees out of work and highlighting the devastating impact of cyber attacks on British businesses. One password is believed to have been all it took for a ransomware gang to destroy a 158-year-old company and put 700 people out of work. KNP Logistics, a Northamptonshire […]
The post Weak Password Let Ransomware Gang Destroy 158-Year-Old Company appeared first on Cyber Security News.
Wiz Research has disclosed a severe vulnerability in the NVIDIA Container Toolkit (NCT), dubbed #NVIDIAScape and tracked as CVE-2025-23266 with a CVSS score of 9.0, enabling malicious containers to escape isolation and gain root access on host systems. This flaw, stemming from a misconfiguration in OCI hook handling, affects NCT versions up to 1.17.7 (in […]
The post Researchers Release PoC Exploit for High-Severity NVIDIA AI Toolkit Bug appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
A surveillance company has been detected exploiting a sophisticated SS7 bypass technique to track mobile phone users’ locations. The attack leverages previously unknown vulnerabilities in the TCAP (Transaction Capabilities Application Part) layer of SS7 networks to circumvent security protections implemented by mobile operators worldwide. Key Takeaways1. Malformed SS7 commands mask the IMSI to enable location […]
The post Surveillance Company Using SS7 Bypass Attack to Track the User’s Location Information appeared first on Cyber Security News.
Attackers have already used the exploit dubbed “ToolShell” to intrude hundreds of organizations globally, including private companies and government agencies.
The post Mass attack spree hits Microsoft SharePoint zero-day defect appeared first on CyberScoop.
Hackers are exploiting a significant Microsoft vulnerability chain that allows them gain control of on-premises SharePoint servers, steal cryptographic keys, and access Windows applications like Outlook, Teams, and OneDrive. It also gives them persistence in the systems even after reboots and updates.
The post Hackers Exploiting Microsoft Flaw to Attack Governments, Businesses appeared first on Security Boulevard.
The U.S. is stepping into a new cyber era, and it comes not a moment too soon. With the Trump administration’s sweeping $1 billion cyber initiative in the “Big Beautiful Bill” and growing congressional momentum under the 2026 National Defense Authorization Act (NDAA) to strengthen cyber deterrence, we’re seeing a shift in posture that many […]
The post Why it’s time for the US to go on offense in cyberspace appeared first on CyberScoop.