Blog
Blog
Catch up on industry news, thought leadership, announcements, and more from Tanium.
Tanium Subscription Center
Get Tanium digests straight to your inbox, including the latest thought leadership, industry news and best practices for IT security and operations.

Tanium Atlas: One operator. The full weight of the platform.
Tanium Atlas is generally available to every commercial and U.S. Government cloud customer. Here's what changes for the operators doing the work in an AI threat landscape, and why I wanted to write this one myself.

See the full attack surface. Act on what actually matters.
CVE volumes are climbing, AI-discovered threats are multiplying, and visibility across the full attack surface remains fragmented. Bolt-on solutions and manual handoffs simply can't keep pace. Organizations who are getting ahead share one thing in common: they've replaced fragmented workflows with AI-powered prioritization and autonomous remediation across a unified view of both internal and external risk.

Security Update: Tanium’s Response to the Klue Breach that Allowed Data Exfiltration from Salesforce
Tanium's response to the Klue supply-chain breach that exposed Salesforce CRM data. Learn what happened, what information was involved, and how to stay safe.

Agentic AI security: Key challenges and how to address them
Agentic AI security protects autonomous AI systems that independently plan, reason, and execute multi-step actions across enterprise environments without continuous human oversight.

Risk-based vulnerability management explained
Risk-based vulnerability management (RBVM) is a cybersecurity methodology that prioritizes vulnerabilities based on actual business risk rather than technical severity scores in isolation. RBVM combines vulnerability severity, exploitation likelihood, threat intelligence, and asset criticality to focus remediation on the exposures most likely to be weaponized against your specific environment.

Mapping threats with Tanium Threat Navigator for faster response - Tanium Tech Talks #164
Threat hunting at enterprise scale gets a structured, repeatable workflow upgrade as Tanium Senior Threat Hunter Duncan Miller walks through Tanium Threat Navigator, a new capability inside Threat Response that transforms iterative hunts into shareable, actionable intelligence.

Is platform engineering just DevOps with a new name, or is something operationally different happening?
Platform engineering is the practice of building and maintaining a centralized internal developer platform (IDP), a curated set of tools, workflows, and self-service capabilities that application teams consume rather than configure on their own. It's a structural response to how DevOps practices evolve at scale, particularly when "you build it, you run it" introduces more cognitive load than individual development teams can sustainably manage.

Latest agentic AI developments and industry trends
A practitioner's guide to the capability shifts, framework changes, and regulatory developments reshaping how enterprise IT and cybersecurity teams govern, deploy, and defend against autonomous agents.

Critical Netlogon RCE on domain controllers (CVE-2026-41089)
A critical, unauthenticated remote code execution vulnerability in Windows Netlogon (CVE-2026-41089, CVSS 9.8) lets a remote attacker run code as SYSTEM on a domain controller. Patch all domain controllers in the same maintenance window with the May 2026 security updates.

Locked Shields and the OSI Model: Stop blaming the firewall
A back-to-basics walk through what blue teams actually defend at each layer, and why the unglamorous stuff (Layer 2, BGP) keeps deciding the scoreboard.

Mapping enterprise IT infrastructure with Tanium Atlas - Tanium Tech Talks #163
Tanium Senior Director of Product Management and Portfolio Lead Steven Yang walks through Tanium Atlas, an AI-driven experience that replaces fixed module navigation with natural language prompts, dynamic composable pages, and agentic workflows, fundamentally changing how IT and security teams interact with endpoint data.

Automated vulnerability remediation: A governance, validation, and rollout guide for enterprise teams
Automated vulnerability remediation uses policy-driven workflows to execute approved remediation actions, including patch deployment, software updates, and configuration changes, consistently across managed assets. Within a broader vulnerability management program, it helps teams close the gap between identifying an exposure and safely resolving it at scale.