Resources

Navigating the Privacy Paradox: How Organizations Can Secure Customer Data While Ensuring Convenience
Blog

Navigating the Privacy Paradox: How Organizations Can Secure Customer Data While Ensuring Convenience

By Josh Breaker-Rolfe on Wed, 09/25/2024
Privacy and convenience have always been at odds, especially regarding digital onboarding or online sign-ups. For modern organizations, striking a balance between the two has become increasingly important. At the same time, a recent report said 53% of customers suggest that they would give up their interaction with a brand if it took longer than two minutes, while as many as 87% expect basic...
Cybersecurity
File Integrity & Change Monitoring
Security Configuration Management
Common Phishing Attacks and How to Protect Against Them
Blog

Common Phishing Attacks and How to Protect Against Them

By Kirsten Doyle on Wed, 09/11/2024
Phishing is a malicious attempt to deceive individuals into divulging sensitive information such as usernames, passwords, credit card numbers, or other personal data. These attacks are typically carried out by masquerading as a trustworthy entity in electronic communications. Phishing can take many forms and has evolved to become more sophisticated, making it imperative for individuals and...
Vulnerability & Risk Management
Cybersecurity
Incident Detection & Investigation
This Senate Bill Could Improve Voting Machine Security
Blog

This Senate Bill Could Improve Voting Machine Security

By PJ Bradley on Wed, 09/11/2024
The upcoming election has brought up conversations about the security of our voting infrastructure. While recent developments have somewhat shifted attention toward more visceral threats such as "death threats against county clerks, polling-place violence, and AI-fueled disinformation," the protection of voting machine security is still a pressing concern.Securing electronic voting infrastructure...
Cybersecurity
Incident Detection & Investigation
Security Configuration Management
Tripwire VERT Security Update
Blog

VERT Threat Alert: September 2024 Patch Tuesday Analysis

By Tyler Reguly on Tue, 09/10/2024
Today’s VERT Alert addresses Microsoft’s September 2024 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-1123 as soon as coverage is completed. In-The-Wild & Disclosed CVEs CVE-2024-38217Windows uses the Mark of the Web (MoTW) to identify files downloaded from the Internet. This is done by setting the NTFS Zone.Identifier alternate Data...
Vulnerability & Risk Management
VERT Research
Navigating Change: Three Levels to Filter Out the Noise in Tech Environments
Blog

Navigating Change: Three Levels to Filter Out the Noise in Tech Environments

By Kirsten Doyle on Tue, 09/03/2024
Change is relentless. Technology evolves at breakneck speed, and security practitioners face a constant barrage of updates, system tweaks, and new tools. This relentless stream of modifications can create a clutter of information, making it challenging to pinpoint what is truly important.Effectively filtering through this noise through effective change management is critical for maintaining...
Cybersecurity
File Integrity & Change Monitoring
Guardians of the Files: Tracing the Evolution of File Integrity Monitoring
Blog

Guardians of the Files: Tracing the Evolution of File Integrity Monitoring

By Kelsey Arhart on Mon, 09/02/2024
File Integrity Monitoring (FIM) is a cybersecurity process that involves continuously monitoring files and systems to identify any unauthorized changes. FIM solutions maintain file integrity by comparing a file or system's current state to a known, trusted baseline and flagging any discrepancies. It is key for identifying security breaches, preventing data tampering, and maintaining compliance...
Cybersecurity
File Integrity & Change Monitoring
Tripwire VERT Security Update
Blog

VERT Threat Alert: August 2024 Patch Tuesday Analysis

By Tyler Reguly on Tue, 08/13/2024
Today’s VERT Alert addresses Microsoft’s August 2024 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-1119 as soon as coverage is completed.In-The-Wild & Disclosed CVEsCVE-2024-38178CVE-2024-38178 describes a vulnerability in the Microsoft Edge scripting engine when run in Internet Explorer Mode. On top of requiring Edge be running in...
Vulnerability & Risk Management
VERT Research
Have You Heard About the New PCI 4.0 Section 1.2 Spec? Tripwire Makes Compliance Easy
Blog

Have You Heard About the New PCI 4.0 Section 1.2 Spec? Tripwire Makes Compliance Easy

By Michael Betti on Wed, 08/07/2024
If you’ve been keeping up with the Payment Card Industry Data Security Standard (PCI DSS), you’ll know it has a new specification that revolves around network security controls. Let’s dig into the details.A Little Back StoryIt helps to level-set for anyone who might be coming into this from a non-technical role. We all know PCI DSS (v4.0) is the payment card industry’s compliance standard for...
Compliance
PCI DSS
Fortra Datasheet
Datasheet

Tripwire Enterprise and IBM i

Many of the world's largest companies rely on IBM i operating on IBM Power Servers as their strategic platform for business-critical activities such as retail, distribution, logistics, banking, manufacturing planning, healthcare, insurance, hospitality management, government administration, and legal case management. Given the widespread use of the IBM i operating system, advanced cybersecurity...
File Integrity & Change Monitoring
Security Configuration Management
Fortra Webinar
On-Demand Webinar

FIM Isn’t Just for Files Anymore

Mon, 08/05/2024
File integrity monitoring was invented by Tripwire’s founder over 25 years ago and has evolved over time to become one of the most important security controls — so critical, in fact, that it’s required by major compliance standards like the Payment Card Industry Data Security Standard (PCI DSS). But what a lot of cybersecurity professionals aren’t familiar with is how FIM has expanded to include a...
File Integrity & Change Monitoring
Navigating PCI DSS 4.0: Your Guide to Compliance Success
Blog

Navigating PCI DSS 4.0: Your Guide to Compliance Success

By Kirsten Doyle on Mon, 07/29/2024
The transition to PCI DSS 4.0 is here. The transition period from PCI DSS 3.2 ended on March 31, 2024, so businesses in all sectors must focus on aligning their practices with the new requirements.This blog will guide you through the key points discussed by PCI experts Steven Sletten and Jeff Hall in a recent webinar held by Fortra on "PCI 4.0 is Here: Your Guide to Navigating Compliance Success....
Compliance
PCI DSS
Low-Hanging Fruits Vs. Those at the Top of the Tree: Cybersecurity Edition
Blog

Low-Hanging Fruits Vs. Those at the Top of the Tree: Cybersecurity Edition

By Joe Pettit on Tue, 07/16/2024
Companies often go for high-end cybersecurity solutions because dealing with complex problems looks impressive. The appeal of fancy tech and advanced security challenges gives them a sense of achievement and a chance to show off their skills - and says they're serious about staying ahead of cyber crooks.However, this isn't always the best strategy. Many significant risks arise from simple...
Cybersecurity
Incident Detection & Investigation
IT Security Operations & Asset Discovery
Security Configuration Management
Addressing Client-Side Risks in PCI DSS 4.0
Blog

Addressing Client-Side Risks in PCI DSS 4.0

By Josh Davies on Mon, 07/15/2024
It seems like such a short time ago that the Security Standards Council released the newest version of the Payment Card Industry Data Security Standard (PCI DSS). It has been a full year, and version 4.0 is now in effect. Industries that adhere to the Standard were given the year to implement the new changes. The Standard includes limited exceptions for specific requirements, classifying them as...
Cybersecurity
Compliance
PCI DSS
Tripwire VERT Security Update
Blog

VERT Threat Alert: July 2024 Patch Tuesday Analysis

By Tyler Reguly on Tue, 07/09/2024
Today’s VERT Alert addresses Microsoft’s July 2024 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-1114 as soon as coverage is completed. In-The-Wild & Disclosed CVEsCVE-2024-38112A vulnerability in the Windows MSHTML Platform could allow spoofing to occur. Successful exploitation of this vulnerability requires that the attacker convince...
Vulnerability & Risk Management
VERT Research
IoT Security Regulations: A Compliance Checklist – Part 2
Blog

IoT Security Regulations: A Compliance Checklist – Part 2

By Gilad David Maayan on Wed, 07/03/2024
In Part 1, the existing global regulations around IoT were introduced. In this part, the challenge of complying with these rules is examined.The IoT Security ChallengeSecuring the Internet of Things (IoT) presents complex challenges that stem primarily from the scale, heterogeneity, and distributed nature of IoT networks:Inconsistent security standards: One of the most pressing issues is the...
Cybersecurity
Compliance
IT Security Operations & Asset Discovery
Superior Integrity Monitoring: Getting Beyond Checkbox FIM
Blog

Superior Integrity Monitoring: Getting Beyond Checkbox FIM

By Fortra Staff on Tue, 07/02/2024
Contrary to what one might expect, creating a File Integrity Monitoring (FIM) system is pretty easy. Practically anyone with a modicum of Python, Perl, or development skills can write an app or script to gather a file's checksum, compare it to a list or baseline, and tell you whether or not said file has changed.But creating a good FIM solution is hard. Many inadequate checkbox File Integrity...
Cybersecurity
File Integrity & Change Monitoring
7 Challenges in Scaling SOC Operations and How to Overcome Them
Blog

7 Challenges in Scaling SOC Operations and How to Overcome Them

By Josh Breaker-Rolfe on Mon, 06/24/2024
In the past four years, cyberattacks have more than doubled. Cybercriminals are leveraging emerging technologies like artificial intelligence (AI) to facilitate more sophisticated attacks. Geopolitical tumult has increased cyber risk. Couple these factors with a near-ubiquitous desire for businesses to expand their operations, and it’s easy to understand the need for scaling Security Operations...
Cybersecurity
IT Security Operations & Asset Discovery
Gaining Network Transparency with Asset Discovery and Compliance for IT/OT
Blog

Gaining Network Transparency with Asset Discovery and Compliance for IT/OT

By Faisal Parkar on Mon, 06/24/2024
I recently came across the "Johari Window Model" and thought this would be a good way to gain inspiration to explain the conundrum faced by many cybersecurity customers. The table below shows us the breakdown of the stages that are applicable not just to IT and OT environments but also to other facets of our daily lives. This model can be applied...
Cybersecurity
IT Security Operations & Asset Discovery
IoT Security Regulations: A Compliance Checklist – Part 1
Blog

IoT Security Regulations: A Compliance Checklist – Part 1

By Gilad David Maayan on Mon, 06/24/2024
The Internet of Things (IoT) refers to the global network of physical devices connected to the internet, capable of collecting and sharing data. IoT devices range from everyday household items to sophisticated industrial tools. By integrating sensors and communication hardware, IoT bridges the gap between the physical and digital worlds, enabling environments where smart devices operate...
Cybersecurity
IT Security Operations & Asset Discovery