Match new CISA vulnerabilities to your assets in Tenable
Build a scheduled workflow that reads the CISA vulnerability RSS feed and detects new entries. For each new CVE, query Tenable to find assets with that vulnerability. If any are affected, send a Microsoft Teams message listing the CVE and impacted systems. Deduplicate feed items, handle CVEs not found in Tenable, and retry API failures. Output the new CVEs and the affected-asset details.
What this prompt builds
Watch the CISA feed and check Tenable to see if any of your systems are actually affected.
The problem
Knowing a new vulnerability exists is useless without knowing whether it affects your environment, and cross-referencing CISA against your scanner by hand is slow. Teams either over-react or miss real exposure.
Solution and impact
This workflow monitors the CISA vulnerability feed and queries Tenable to see if any systems carry the vulnerability, then alerts in Microsoft Teams. Defenders immediately know which new CVEs actually put their assets at risk.