Resources
On-Demand Webinar

Demystifying Vulnerability Management: Cutting Through the Noise

Wed, 10/18/2023
Vulnerability management (VM) is an essential cybersecurity control to discover, profile, and assess vulnerability risk so security teams can act quickly to close attack vectors. Over the years the lines have blurred a little regarding which cybersecurity practices fall under the VM classification. Watch this on-demand webinar to learn the basics of VM and how...
Vulnerability & Risk Management
Plastic surgeries warned by the FBI that they are being targeted by cybercriminals
Blog

Plastic surgeries warned by the FBI that they are being targeted by cybercriminals

By Graham Cluley on Wed, 10/18/2023
Plastic surgeries across the United States have been issued a warning that they are being targeted by cybercriminals in plots designed to steal sensitive data including patients' medical records and photographs that will be later used for extortion. The warning, which was issued by the FBI yesterday and is directed towards plastic surgery offices...
Cybersecurity
Compliance
HIPAA
The Peril of Child Identity Theft and How to Mitigate It
Blog

The Peril of Child Identity Theft and How to Mitigate It

By Joseph Chukwube on Wed, 10/18/2023
We often hear of how we need to protect ourselves from online scams. Criminals seek our personal information in order to use it for multiple nefarious purposes. However, there is a population who, while not having a broad online presence, are equally vulnerable to identity theft. Children are particularly vulnerable to identity theft, as they often...
Cybersecurity
Save the Embarrassment: The Value of Multi-Factor Authentication
Blog

Save the Embarrassment: The Value of Multi-Factor Authentication

By Tyler Reguly on Tue, 10/17/2023
These days, it’s not a matter of if your password will be breached but when. Major websites experience massive data breaches at an alarming rate. Have I Been Pwned currently has records from 705 sites comprising 12.6 billion accounts. This includes well-known names like Wattpad, Verifications.io, and Facebook. This is a 30% increase in the number...
Cybersecurity
What is a CMDB?
Blog

What is a CMDB?

By Lane Thames on Tue, 10/17/2023
There are countless tools and technologies available to help an organization stay on top of its IT assets, and a configuration management database (CMDB) is an extremely useful one. The database keeps track of relevant information regarding various hardware and software components and the relationships between them. It allows IT teams to have an...
Security Configuration Management
Cyberattacks on Gaming Developers: Five Security Tips
Blog

Cyberattacks on Gaming Developers: Five Security Tips

By PJ Bradley on Mon, 10/16/2023
Gaming companies collect data concerning user behavior for a variety of reasons: to inform investment and content decisions, enable game and advertisement personalization, and improve gameplay, to name a few. However, the data available provides a daunting task for those attempting to make use of it, as well as a ripe target for attackers....
Cybersecurity
Understanding Cybersecurity Footprinting: Techniques and Strategies
Blog

Understanding Cybersecurity Footprinting: Techniques and Strategies

By Dilki Rathnayake on Mon, 10/16/2023
Footprinting, also known as fingerprinting, is a methodology used by penetration testers, cybersecurity professionals, and even threat actors to gather information about a target organization to identify potential vulnerabilities. Footprinting is the first step in penetration testing. It involves scanning open ports, mapping network topologies, and...
Cybersecurity
Incident Detection & Investigation
Fortifying IoT Devices: Unraveling the Art of Securing Embedded Systems
Blog

Fortifying IoT Devices: Unraveling the Art of Securing Embedded Systems

By Isla Sibanda on Fri, 10/13/2023
Interconnected, data-enabled devices are more common now than ever before. By 2027, it is predicted that there will be more than 41 billion new IoT devices. The emergence of each new device offers a fresh vulnerability point for opportunistic bad actors. In 2022, there were over 112 million cyberattacks carried out on IoT devices worldwide....
Cybersecurity
IT Security Operations & Asset Discovery
Tripwire VERT Security Update
Blog

VERT Threat Alert: October 2023 Patch Tuesday Analysis

By Tyler Reguly on Tue, 10/10/2023
Today’s VERT Alert addresses Microsoft’s October 2023 Security Updates, which includes a recently introduced release notes format. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-1077 on Wednesday, October 11th. In-The-Wild & Disclosed CVEs CVE-2023-41763 While this vulnerability is labeled as a Skype for...
Vulnerability & Risk Management
VERT Research
Cybersecurity Trends to Watch in the US in the Next 5 Years
Blog

Cybersecurity Trends to Watch in the US in the Next 5 Years

By Stefanie Shank on Tue, 10/10/2023
As cyber threats grow more frequent and sophisticated, the need for vigilant defense is paramount, and cybersecurity is top of mind for organizations nationwide. Understanding the threat landscape and current and future trends is crucial to designing effective security strategies to mitigate risk and keep companies, their employees, and their data...
Compliance vs. Security: Striking the Right Balance in Cybersecurity
Blog

Compliance vs. Security: Striking the Right Balance in Cybersecurity

By Jay Thakkar on Mon, 10/09/2023
Compliance and security often go hand in hand as ideas that attempt to protect against cyber threats. While both compliance and security are designed to lower risk, they are not mutually inclusive—that is, not everything that is required for compliance will necessarily help with security, and not everything that bolsters security will necessarily...
Cybersecurity
Compliance
Security Configuration Management
cogs
Blog

Revealed! The top 10 cybersecurity misconfigurations, as determined by CISA and the NSA

By Graham Cluley on Fri, 10/06/2023
A joint cybersecurity advisory from the United States's National Security Agency (NSA) and Cybersecurity and Infrastructure Security Agency (CISA) has shone a light on the top ten most common cybersecurity misconfigurations found in large private and public organisations. The report aims to detail the weaknesses found in many large organisations,...
Cybersecurity
Security Configuration Management
Patch Priority Index
Blog

Tripwire Patch Priority Index for September 2023

By Lane Thames on Fri, 10/06/2023
Tripwire's September 2023 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft. First on the patch priority are patches for Microsoft Edge (Chromium-based) that resolve 5 vulnerabilities such as out of bounds memory access, type confusion, and use after free. Next on the patch priority list this month are patches for...
Vulnerability & Risk Management
How MSSPs Help with Cybersecurity Compliance
Blog

How MSSPs Help with Cybersecurity Compliance

By Zack Jessee on Wed, 10/04/2023
While always a part of business, compliance demands have skyrocketed as the digital world gives us so many more ways to go awry. We all remember the Enron scandal that precipitated the Sarbanes-Oxley Act (SOX). Now, SOX compliance means being above board on a number of cybersecurity requirements as well. Fortra's Tripwire recently released a new...
Cybersecurity
Compliance
Managed Security Services
What is NERC? Everything you need to know
Blog

What is NERC? Everything you need to know

By Michael Betti on Tue, 10/03/2023
Electric grids are part of every nation’s critical infrastructure. Every societal activity and business depends on reliable and safe electricity distribution. The US electric grid is a huge network of powerlines, distribution hubs, and renewable and non-renewable energy generators that is increasingly exposed to cyber-physical risks due to the...
Compliance
NERC CIP
Industrial Control Systems
Key Takeaways from the 2023 Domain Impersonation Report
Blog

Key Takeaways from the 2023 Domain Impersonation Report

By Eric George on Tue, 10/03/2023
One of the most pervasive and unavoidable threats on the internet, domain impersonation can be used by bad actors as the basis for a wide range of attacks. The various ways in which cybercriminals make use of lookalike domains often fluctuate, and the first half of 2023 has exemplified this fact. Staying on top of security and not falling victim to...
Cybersecurity
ICS-Environments-and-Patch-Management-What-to-Do-If-You-Cant-Patch
Blog

ICS Environments and Patch Management: What to Do If You Can’t Patch

By Anastasios Arampatzis on Mon, 10/02/2023
The evolution of the cyber threat landscape highlights the need for organizations to strengthen their ability to identify, analyze, and evaluate cyber risks before they evolve into security incidents. Known unpatched vulnerabilities are often exploited by criminals to penetrate Industrial Control Systems (ICS) environments and disrupt critical...
Vulnerability & Risk Management
Industrial Control Systems