Resources
Product Video

Enterprise Vulnerability Management in the Cloud

Mon, 08/15/2022
See how other organizations have simplified and automated compliance reporting processes, risk scoring and prioritized remediation efforts.
Cloud Security
Vulnerability & Risk Management
Product Video

Watch a Demo of Tripwire Enterprise

Mon, 08/15/2022
Compliance frameworks are notoriously dense and complex, making them difficult to put into action. Compliance is also time-consuming—especially if you’re still attempting manual configuration of your systems, applications, databases and cloud assets. Manual configuration is error-prone and immediately out of date the moment an assessment ends. And a lack of compliance can result in failing audits,...
Compliance
CIS Controls
NIST
PCI DSS
Product Video

Watch a Demo of Tripwire Enterprise

Mon, 08/15/2022
Point of sale attacks are on the rise and securing POS devices cannot be a generic effort. This video shows how Tripwire addresses POS threat protection.
Vulnerability & Risk Management
Ransomware attack blamed for closure of all 7-Eleven stores in Denmark
Blog

Ransomware attack blamed for closure of all 7-Eleven stores in Denmark

By Graham Cluley on Fri, 08/12/2022
Ransomware is to blame for the closure of all 175 7-Eleven stores in Denmark on Monday. The retailer closed all of its stores in Denmark after its cash registers and payment systems were brought down in the attack. Initially, 7-Eleven's Danish division did not say that ransomware was responsible for its problems, simply describing the incident as...
Cyber Threats – The New Norm in Data Security
Blog

Cyber Threats – The New Norm in Data Security

By Tripwire Guest Authors on Tue, 08/09/2022
“Data: We have never had so much of it, and it has never been so challenging to protect.” These are some of the opening words in the new survey published by ISMG and Fortra in the ‘Data Security Survey 2022’. The survey explores how COVID19 has permanently changed how CISOs approach Data Security. It is an important study because it recognises...
VERT Threat Alert: September 2022 Patch Tuesday Analysis
Blog

VERT Threat Alert: August 2022 Patch Tuesday Analysis

By Tyler Reguly on Tue, 08/09/2022
Today’s Patch Tuesday VERT Alert addresses Microsoft’s August 2022 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-1015 on Wednesday, August 10th. In-The-Wild & Disclosed CVEs CVE-2022-34713 According to Microsoft, CVE-2022-34713 is a variant of the Dogwalk vulnerability. There has been a...
Vulnerability & Risk Management
VERT Research
Application Security Report 2022: Key Trends and Challenges
Blog

Application Security Report 2022: Key Trends and Challenges

By Tripwire Guest Authors on Mon, 08/08/2022
At a time when the state of cybersecurity is constantly changing, with new and increasing threats arising each day, it is vital for all organizations to keep it near the top of their list of priorities. Business applications are increasingly targeted by cybercriminals, and their ability to protect and defend themselves against these attacks is a...
Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of August 1, 2022
Blog

Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of August 1, 2022

By Andrew Swoboda on Mon, 08/08/2022
All of us at Tripwire’s Vulnerability Exposure and Research Team (VERT) are constantly looking out for interesting stories and developments in the infosec world. Here’s what cybersecurity news stood out to us during the week of August 1st, 2022. I’ve also included some comments on these stories. Windows 11 Smart App Control blocks files used to...
Vulnerability & Risk Management
VERT Research
Weak Cybersecurity is taking a toll on Small Businesses
Blog

Weak Cybersecurity is taking a toll on Small Businesses

By Tripwire Guest Authors on Sun, 08/07/2022
Life among America’s nearly 32 million small businesses has never been easy. According to the Small Business Administration, about 20% of small business startups fail in their first year and half succumb to failure within five years. Bigger businesses have always had more capital, better access to loans, and more staying power. Lately, survival has...
Top trends in Application Security in 2022
Blog

Top trends in Application Security in 2022

By Tripwire Guest Authors on Thu, 08/04/2022
The rising number of cyber attacks against software applications has emphasized how security must serve as an important factor in software development. More than the traditional Software Development Lifecycle (SDLC) procedures, now security-integrated development lifecycles are being widely adapted. These aren't the typical security assessments...
Aviation Safety and Cybersecurity: Learning from Incidents
Blog

Aviation Safety and Cybersecurity: Learning from Incidents

By Tripwire Guest Authors on Wed, 08/03/2022
The aviation safety sector is the study and practice of managing aviation risks. It is a solid concentration of regulations, legal documents, investigations of accidents and near-miss aviation incidents. On top of them lie lessons learned and shared knowledge; reports, facts and stats forming a cognitive super vitamin, that the aviation community...
Auto Industry at Higher Risk of Cyberattacks in 2023
Blog

Auto Industry at Higher Risk of Cyberattacks in 2023

By Tripwire Guest Authors on Tue, 08/02/2022
Cyberattacks are an increasingly common occurrence for a spectrum of industries. Rising cybercrime affects everyone, but certain sectors are more at risk than others. In 2023, the auto industry could face particularly significant dangers. Attacks in the automotive space can impact automakers, automotive fleets, and consumers alike. Reducing these...
Tripwire Patch Priority Index for August 2022
Blog

Tripwire Patch Priority Index for July 2022

By Lane Thames on Tue, 08/02/2022
Tripwire's July 2022 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft and Adobe. First on the patch priority list this month are patches that resolve 2 vulnerabilities in Edge. Next is a patch that resolves a security feature bypass vulnerability in Office. Up next are patches for Adobe Reader and Acrobat that...
Exploring ESG Through a GRC Lens
Blog

Exploring ESG Through a GRC Lens

By Tripwire Guest Authors on Mon, 08/01/2022
Oftentimes, three-letter acronyms trend and become buzzwords. At other times, they act as catalysts by influencing the business environment in which an organization operates. Such acronyms include CSR (corporate social responsibility), GRC (governance, risk, and compliance), and the most recent one, ESG (environmental, social, and governance). These...
Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of July 25, 2022
Blog

Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of July 25, 2022

By Andrew Swoboda on Mon, 08/01/2022
All of us at Tripwire’s Vulnerability Exposure and Research Team (VERT) are constantly looking out for interesting stories and developments in the infosec world. Here’s what cybersecurity news stood out to us during the week of July 25, 2022. I’ve also included some comments on these stories. SonicWall fixed critical SQLi in Analytics and GMS...
Vulnerability & Risk Management
VERT Research
Email Fraud in 2022: What you Need to Know
Blog

Email Fraud in 2022: What you Need to Know

By Tripwire Guest Authors on Sun, 07/31/2022
With how much of our personal and professional lives take place online, it becomes more important each day for us to understand our vulnerability to cyberattacks. Cybercriminals target emails, domains, and accounts in order to impersonate identities and scam consumers and businesses alike. In 2021 alone, email spoofing and phishing increased by 220%...
Malware on IBM Power Systems: What You Need to Know
Blog

Malware on IBM Power Systems: What You Need to Know

By Tripwire Guest Authors on Thu, 07/28/2022
Malware – what are the threats? Malware can come from and in a variety of attack vectors. Besides using ‘traditional’ methods of spreading malware, adversaries can leverage more sophisticated methods to turn your Power System into a ‘malware host’. The key target is your data. Data is valuable, and organisations have paid at least $602 million to...