Resources

Tripwire VERT Security Update
Blog

VERT Threat Alert: September 2023 Patch Tuesday Analysis

By Tyler Reguly on Tue, 09/12/2023
Today’s VERT Alert addresses Microsoft’s September 2023 Security Updates, which includes a recently introduced release notes format. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-1073 on Wednesday, September 13th. In-The-Wild & Disclosed CVEs CVE-2023-36761 Microsoft has indicated that a vulnerability...
Vulnerability & Risk Management
VERT Research
Life-in-the-Clouds-Navigating-Security-Challenges-in-Cloud-Environments
Blog

Life in the Clouds: Navigating Security Challenges in Cloud Environments

By Stefanie Shank on Tue, 09/12/2023
As the realm of technology continues to evolve, the significance of cloud computing has grown exponentially. This paradigm shift offers unparalleled scalability, efficiency, and cost-effectiveness benefits. However, with these advantages come a host of security challenges that need careful consideration. This article delves into the vital realm of...
Cybersecurity
OT Security: Risks, Challenges and Securing Your Environment
Blog

OT Security: Risks, Challenges and Securing your Environment

By Katrina Thompson on Mon, 09/11/2023
Before the revolution of Information Technology (IT), the world experienced the revolution of Operational Technology (OT). Operational Technology is the combination of hardware and software that controls and operates the physical mechanisms of industry. OT systems play an important role in the water, manufacturing, power, and distribution systems...
Cybersecurity
Industrial Control Systems
10-Mistakes-in-Cybersecurity-and-How-to-Avoid-Them
Blog

10 Mistakes in Cybersecurity and How to Avoid Them

By Katrina Thompson on Mon, 09/11/2023
It's easy to rest on our laurels. Prevent a few breaches – or go long enough without one – and you start to feel invincible. While our efforts are certainly laudable, we can't get too comfortable. As defenders, we always need to be on the hunt for what we've missed and ways to do better. Here are ten common cybersecurity mistakes that crop up (and...
Cybersecurity
File Integrity & Change Monitoring
Datasheet

Tripwire Services Comparison Datasheet

Not all organizations have the internal resources necessary to manage their cybersecurity and compliance solutions in-house. This may seem like a roadblock to those who see the greater potential of their solutions and want to do more to reach their goals but cannot expand their technical teams due to the high demand for qualified candidates or budgetary limitations. However, the services available...
Managed Security Services
Patch Priority Index
Blog

Tripwire Patch Priority Index for August 2023

By Lane Thames on Fri, 09/08/2023
Tripwire's August 2023 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft. First on the patch priority list this month are patches for Microsoft Office, Excel, Visio, Teams, and Outlook. The patches resolve 10 issues including remote code execution, information disclosure, security feature bypass, and spoofing...
Vulnerability & Risk Management
Cybersecurity
Thousands of dollars stolen from Texas ATMs using Raspberry Pi
Blog

Thousands of dollars stolen from Texas ATMs using Raspberry Pi

By Graham Cluley on Thu, 09/07/2023
A Texas court has heard how last month a gang of men used a Raspberry Pi device to steal thousands of dollars from ATMs. According to local media reports, three men were arrested in Lubbock, Texas, after attempting to steal "large sums of US currency" from ATMs. The men - 38-year-old Abel Valdes, 41-year-old Yordanesz Sanchez, and 33-year-old...
Cybersecurity
What is ISO 27002:2022 Control 8.9? A Quick Look at the Essentials
Blog

What is ISO 27002:2022 Control 8.9? A Quick Look at the Essentials

By Taha Dharsi on Wed, 09/06/2023
The basic parameters that control how hardware, software, and even entire networks operate are configurations, whether they take the form of a single configuration file or a collection of connected configurations. For instance, the default properties a firewall uses to control traffic to and from a company's network, such as block lists, port...
Cybersecurity
Compliance
Security Configuration Management
5-Common-Business-Mistakes-in-Ransomware-Prevention-Planning
Blog

5 Common Business Mistakes in Ransomware Prevention Planning

By Anastasios Arampatzis on Wed, 09/06/2023
One thing is becoming evident as ransomware attacks increase in frequency and impact: businesses can take additional precautions. Unfortunately, many companies are failing to do so. Most victims are sufficiently warned about potential weaknesses yet unprepared to recover when hit. Robust ransomware prevention is more important than ever. This...
Cost of Data Breach Report
Blog

2023 Cost of a Data Breach: Key Takeaways

By Matthew Jerzewski on Tue, 09/05/2023
2023 Cost of a Data Breach: Key Takeaways It’s that time of year - IBM has released its “Cost of a Data Breach Report.” This year’s report is jam-packed with some new research and findings that highlight how organizations are implementing security and risk mitigation techniques to help identify and contain data breaches. Key Takeaways The...
Cybersecurity
achieving-superior-security-with-cont-compliance
Blog

Achieving Superior Security with Continuous Compliance

By Stefanie Shank on Tue, 09/05/2023
In a digital-first world, safeguarding sensitive data and ensuring compliance with industry regulations are paramount. Enter "Continuous Compliance" – a dynamic approach reshaping the cybersecurity paradigm. As a key part of an effective compliance strategy, continuous compliance is pivotal in fortifying security measures. This modern strategy...
Working with a Reliable Partner for Cybersecurity Success
Blog

Working with a Reliable Partner for Cybersecurity Success

By Joe Pettit on Thu, 08/31/2023
Technology companies are often seen as revolving doors of constantly shifting personnel. Whether they are seeking a better work environment or chasing a higher paycheck, these staff changes can hurt an organization’s progress. Worse yet, the customers are often negatively impacted by these changes in the continuity of established relationships. At...
Vulnerability & Risk Management
Cybersecurity
File Integrity & Change Monitoring
Managed Security Services
Security Configuration Management
Updated NCSC Report Highlights Key Threats for the UK Legal Sector
Blog

Updated NCSC Report Highlights Key Threats for the UK Legal Sector

By Josh Breaker-Rolfe on Wed, 08/30/2023
On June 22nd, 2023, the National Cyber Security Centre (NCSC), the UK's cybersecurity agency, released a Cyber Threat Report for the country's legal sector. Developed to update a previous iteration from 2018, the report reflects a dramatic change in the cybersecurity threat landscape, offering advice that considers the security issues inherent with...
Understanding-Firewalls
Blog

Understanding Firewalls – Types, Configuration, and Best Practices for Effective Network Security

By Dilki Rathnayake on Wed, 08/30/2023
A firewall is a security device that controls the flow of traffic across a network. A firewall may be a hardware appliance, or it may be a piece of software that runs on a third-party operating system. Firewalls operate based on a set of pre-defined, as well as customizable security rules that inspect network traffic to block or permit access to a...
Vulnerability & Risk Management
Cybersecurity
Incident Detection & Investigation
Security Configuration Management
How-To-Hide-Browsing-History-Complete-Guide
Blog

How To Hide Browsing History – Complete Guide

By Josh Breaker-Rolfe on Tue, 08/29/2023
In years gone by, there was a stigma attached to hiding one's browsing history. Wiping browsing history was seen as suspicious; it suggested that someone had something to hide. It was – and still is- the butt of many jokes. However, individuals might want to hide their browsing history for many reasons. They range from the relatively trivial – like...
Cybersecurity
how-improved-visibility-helps-achieve-compliance
Blog

How Improved Visibility Helps Achieve Compliance

By Stefanie Shank on Mon, 08/28/2023
In the ever-evolving cybersecurity landscape, businesses face an exhaustive battle to safeguard their valuable data while complying with industry regulations. To address these challenges, innovative solutions have emerged to enhance network security. Network visibility remains a crucial focus. The profound impact of heightened visibility cannot be...
what-is-the-network-and-information-security-2-directive-
Blog

What is The Network and Information Security 2 Directive (NIS2)?

By Josh Breaker-Rolfe on Mon, 08/28/2023
The Network and Information Security 2 (NIS2) Directive is the European Union's (EU) second attempt at an all-encompassing cybersecurity directive. The EU introduced the legislation to update the much-misinterpreted Network and Information Security (NIS) Directive (2016) and improve the cybersecurity of all member states. It signed NIS2 into law in...
Cybersecurity
Compliance
Datasheet

NCA Compliance with Fortra

The National Cybersecurity Authority (NCA) is the government entity in charge of cybersecurity in Saudi Arabia, encompassing both regulatory and operational functions related to cybersecurity. National Cybersecurity Authority Essential Cybersecurity Controls The NCA works closely with public and private entities to improve the cybersecurity posture of the country in order to safeguard its vital...
Compliance