Topic
Tanium Blog

May 2026 GitHub breach: Extension hygiene is still a challenge–so what can we do about it?
On May 20, 2026, GitHub disclosed that an employee device was compromised through a malicious VS Code extension, with attackers claiming to have exfiltrated roughly 3,800 internal repositories.

What endpoint security management actually is and what it isn't
Endpoint security management is the centralized IT and security discipline of discovering, monitoring, and controlling all devices on an enterprise network, including laptops, servers, mobile devices, and IoT hardware, to reduce unauthorized access and limit how far threats can travel once inside.

See resilience at scale at Converge World Tour
A preview of the conversations coming to Converge London and Paris this May — and why they matter beyond the event floor.

Mini Shai-Hulud supply chain attack: Why this campaign changes how defenders should think about trusted software
The Mini Shai-Hulud supply chain attack compromised more than 170 packages across npm and PyPI, including packages from TanStack, Mistral AI, and Guardrails AI, by hijacking legitimate CI/CD publishing workflows to distribute malicious versions that still carried apparently valid provenance signals.

10 steps to trusted, validated autonomous IT
Autonomous IT changes the standard endpoint management model to match today's speed and scale while reducing risk and operational cost.

What are vulnerability scanning tools? A guide for enterprise security teams
Vulnerability scanning tools are software solutions that assess networks, systems, and applications for known security weaknesses, misconfigurations, and unpatched software by comparing observed state against vulnerability intelligence.

Eight Tanium Leaders Named 2026 CRN Women of the Channel
As these Tanium women help shape the future of the IT channel, CRN is taking notice.

What is cloud patch management? A complete guide
Cloud patch management is the process of centrally identifying, validating, and deploying operating system and software updates across cloud-based and remote workloads, reducing reliance on on-premises patching infrastructure while helping reduce the security risks associated with unpatched systems.

Server patch management 101: Strategies for secure infrastructure
Server patch management is the process of identifying, testing, and deploying software updates to close security vulnerabilities in server operating systems and applications.

Mac patch management: The realities of macOS patching
Mac patch management is the process of identifying, testing, and deploying software updates across macOS endpoints and third-party applications to reduce the window of exposure before attackers can exploit known vulnerabilities. It's a foundational practice within any enterprise cybersecurity program, particularly as Mac adoption in corporate environments continues to grow.

Tanium Atlas: AI that doesn't just answer—it executes
Tanium Atlas brings the power of Tanium to a single prompt: describe what you need, and Atlas acts—with your governance built in.

What is a software patch? How it works and why it matters
A software patch is a targeted code update that vendors release to fix cybersecurity flaws, correct bugs, or address performance issues in an existing application or operating system without replacing the software entirely.