Resources
On-Demand Webinar

ATT&CKing the Center for Internet Security

Thu, 06/01/2023
From the Critical Security Controls to the Community Defense Model, CIS has provided plenty of mappings that show how knowledge from MITRE ATT&CK can be integrated with their offerings. Last year, CIS went a step further, integrating mappings from MITRE ATT&CK into their Benchmarks. This provides a wealth of information to defenders, but too much information can sometimes lead to information...
Compliance
CIS Controls
The-Issue-of-Insider-Threats-What-you-Need-to-Know
Blog

The Issue of Insider Threats: What you Need to Know

By Tripwire Guest Authors on Wed, 05/31/2023
Not all Risks Become Threats Insider threats are an updated version of the wolf in sheep's clothing - the people we rely on to safeguard systems and data can sometimes be the ones who pose the greatest risk. From malicious actors to negligent employees, insider threats come in many forms and can have devastating consequences for organizations of...
Vulnerability & Risk Management
Cybersecurity
Cybersecurity-Standards-in-the-Banking-Industry
Blog

Cybersecurity Standards in the Banking Industry

By David Bruce on Wed, 05/31/2023
Cybersecurity has risen to become a major concern for nearly every industry. With the constant stream of news about the escalating numbers of breaches, it is understandable that governments have taken a more active role by passing cybersecurity and privacy legislation. Some of the industries are not top of mind to many people. For example, few...
Cybersecurity
Compliance
Guide

File Integrity Monitoring (FIM) Toolkit

File integrity monitoring (FIM) is used to detect and correct unauthorized system changes that may be indicators of compromise. As the inventors of FIM, Fortra’s Tripwire has a multi-decade track record of helping organizations that want to reduce cyber risk and achieve system integrity to avoid security breaches and audit fines. This toolkit is a collection of helpful resources such as articles,...
File Integrity & Change Monitoring
Guide

PCI DSS Resource Toolkit

PCI DSS Resources for Seamless Compliance The Payment Card Industry Data Security Standard (PCI DSS) is one of the most widely applied regulatory compliance standards, meaning thousands of organizations can benefit from streamlining their compliance programs to avoid audit fines and protect cardholder data. Fortra’s Tripwire is an authority on how to achieve continuous, automated compliance and...
Compliance
PCI DSS
How Large is Your Target? Advice for the Smallest Businesses
Blog

How Large is Your Target? Advice for the Smallest Businesses

By Bob Covello on Tue, 05/30/2023
Most cybersecurity professionals will often try to cybersplain the importance of protection to their friends. In most social circles, many of the businesses that people work in are small businesses. Perhaps you are the owner of a small delicatessen, a dry cleaner, or you run a yoga studio, or some similar individually owned operation. Many of these...
PCI DSS 4.0: How to Delight the Auditors
Blog

PCI DSS 4.0: How to Delight the Auditors

By Katrina Thompson on Tue, 05/30/2023
While we all know the actual point of PCI is vastly more far-reaching, we can’t deny that the juggernaut of PCI DSS 4.0 compliance is getting past the auditors. However, there is a right way to do it that doesn’t just check the box – it creates the underlying business operations that enable you to pass an audit any day, at any time, with just the...
Compliance
A-Brief-Introduction-to-the-World-of-IP-Addresses
Blog

A Brief Introduction to the World of IP Addresses

By Tripwire Guest Authors on Mon, 05/29/2023
How many internet-connected devices do you own? If you took a quick inventory around your house, you may be surprised at exactly how many there are. Have you ever wondered how they all communicate, not only with each other, but with the internet as well? This is, in part the result of technology known as IP addressing. What is an IP address? An IP...
Cybersecurity
The Royal & BlackCat Ransomware: What you Need to Know
Blog

The Royal & BlackCat Ransomware: What you Need to Know

By Tripwire Guest Authors on Mon, 05/29/2023
The US healthcare sector continues to be aggressively targeted by ransomware operators. Royal and BlackCat are two of the more recent – and highly sophisticated – ransomware threats. These two new flavors of ransomware pose serious potential impacts on the healthcare sector, but there are appropriate mitigation and defense strategies that...
Cybersecurity
Rogue IT security worker failed to cover his tracks
Blog

Rogue IT security worker failed to cover his tracks

By Graham Cluley on Fri, 05/26/2023
Bad enough for your company to be held to ransom after a cyber attack. Worse still to then have one of your own employees exploit the attack in an attempt to steal the ransom for themselves. That's the situation gene and cell therapy firm Oxford BioMedica found itself in. On 27 February 2018, the Oxford-based firm discovered that it had suffered...
Cybersecurity
Cybersecurity Asset Inventory in Your Home
Blog

Cybersecurity Asset Inventory in Your Home

By Bob Covello on Thu, 05/25/2023
Back in 2015, we published an article about the third party risks that are introduced into a home network. Now, eight years later, it is a good time to revisit the landscape of the home network. If we think about the technology in most homes in 2015, it was fairly sparse, consisting only of a router with an internet connection. The speed of most...
Understanding how Polymorphic and Metamorphic malware evades detection to infect systems
Blog

Understanding how Polymorphic and Metamorphic malware evades detection to infect systems

By Tripwire Guest Authors on Wed, 05/24/2023
Polymorphic and metamorphic malware constantly changes itself in order to avoid detection and persistently remain on the system. This adaptive behavior is the main distinctive attribute of these types of malware, which is also why they are harder to detect; it is also why they pose a great threat to systems. On the surface, the functionality of this...
Cybersecurity
vert_book_club
Blog

#TripwireBookClub – How to Hack Like a Legend

By Tyler Reguly on Tue, 05/23/2023
This one took a bit longer to read than most of the books we review, but that’s entirely on me… everyone else finished it a while ago. This time around, we’re looking at How to Hack Like a Legend: Breaking Windows by Sparc Flow. The No Starch Press page says that the book is “packed with interesting tricks, ingenious tips, and links to useful...
Cybersecurity
A Bright Future for Forensic Analysis
Blog

A Bright Future for Forensic Analysis

By Chris Hudson on Tue, 05/23/2023
I’m going to jump on board the Artificial Intelligence/Machine Learning (AI/ML) bandwagon in this blog and talk about why I’m excited about some of the prospects for this being applied to the compliance and file integrity monitoring data that Tripwire has been specialising in for many years. An Analyst’s Ally A problem faced by many security teams...
VERT NEWS MAY 22
Blog

VERT Reads All About It – Cybersecurity News May 22, 2023

By Andrew Swoboda on Mon, 05/22/2023
The Tripwire Vulnerability Exposure and Research Team (VERT) keeps its finger on the cybersecurity pulse. Check out some of the stories that stood out for us recently: Multiple Vulnerabilities in Netgear Routers Netgear RAX30 routers are subject to multiple vulnerabilities. These vulnerabilities could be chained together to achieve an...
Cybersecurity
chat_gpt
Blog

How ChatGPT is Changing Our World

By Tripwire Guest Authors on Mon, 05/22/2023
The Artificial intelligence (AI) based language model, ChatGPT, has gained a lot of attention recently, and rightfully so. It is arguably the most widely popular technical innovation since the introduction of the now ubiquitous smart speakers in our homes that enable us to call out a question and receive an instant answer. But what is it, and why...
Cybersecurity