Frameworks like the Center for Internet Security (CIS) Controls, MITRE ATT&CK and the National Institute of Standards and Technology (NIST) Cybersecurity Framework give organizations clear, step-by-step methodologies for protecting their sensitive data, leveraging a wealth of industry knowledge to take the guesswork out of your security program.While these cybersecurity frameworks aren’t mandatory...

Escalating cyberthreats in the oil and gas industry underscore the need for substantial collaboration between public and private sectors to mitigate this national security risk, and much of this responsibility falls on the shoulders of individual pipeline operators who need to comply with the Transportation Security Administration (TSA) Security Directive.Despite being best known for its role in...

Each year, Fortra's Core Security conducts a global survey of cybersecurity professionals across various industries on their penetration testing practices to better understand the different approaches to, common challenges with, and overall development of offensive security.The 2024 Penetration Testing Report is an analysis of the results of this survey, with the aim of providing increased...