Resources

VERT Threat Alert: June 2022 Patch Tuesday Analysis
Blog
Blog

VERT Threat Alert: August 2020 Patch Tuesday Analysis

By Tyler Reguly on Tue, 08/11/2020
Image Today’s VERT Alert addresses Microsoft’s August 2020 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-899 on Wednesday, August 12th. In-The-Wild & Disclosed CVEs CVE-2020-1464 A vulnerability exists in the way that Windows validates file signatures. An attacker could...
Vulnerability & Risk Management
VERT Research
Press Release
Press Release

Tripwire’s IP360™ Vulnerability Management Solution Awarded 5-Star Review from SC Media

SC Lab testers give Tripwire IP360 top rating, highlighting sophisticated reporting and risk prioritization. PORTLAND, Ore. – July, 27, 2020 – Tripwire, Inc., a global cybersecurity solutions provider protecting the world’s leading organizations, today announced that its vulnerability management solution Tripwire® IP360™ received a five-star rating by SC Media. “Vulnerability...
VERT Threat Alert: June 2022 Patch Tuesday Analysis
Blog
Blog

VERT Threat Alert: July 2020 Patch Tuesday Analysis

By Tyler Reguly on Tue, 07/14/2020
Image Today’s VERT Alert addresses Microsoft’s July 2020 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-895 on Wednesday, July 15th. In-The-Wild & Disclosed CVEs  CVE-2020-1463 A vulnerability in the SharedStream Library could allow a locally authenticated attacker to run a...
Vulnerability & Risk Management
VERT Research
VERT Threat Alert: June 2022 Patch Tuesday Analysis
Blog
Blog

VERT Threat Alert: June 2020 Patch Tuesday Analysis

By Tyler Reguly on Tue, 06/09/2020
Image Today’s VERT Alert addresses Microsoft’s June 2020 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-888 on Wednesday, June 10th. In-The-Wild & Disclosed CVEs None of the vulnerabilities resolved this month have been publicly disclosed or exploited according to Microsoft....
Vulnerability & Risk Management
VERT Research
Climbing the Vulnerability Management Mountain: Reaching the Summit (VM Maturity Level 5)
Blog
Blog

Climbing the Vulnerability Management Mountain: Reaching the Summit (VM Maturity Level 5)

By Lamar Bailey on Mon, 05/25/2020
Image Only the truly committed ever reach the summit of anything. This sentiment holds true for vulnerability management. An organization cannot reach the summit without a serious commitment to fund and staff the program appropriately across the organization. Reaching ML:5 means tying the program to the business. Everyone must be...
Vulnerability & Risk Management
VERT Threat Alert: June 2022 Patch Tuesday Analysis
Blog
Blog

VERT Threat Alert: May 2020 Patch Tuesday Analysis

By Tyler Reguly on Tue, 05/12/2020
Image Today’s VERT Alert addresses Microsoft’s May 2020 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-884 on Wednesday, May 13th. In-The-Wild & Disclosed CVEs None of the vulnerabilities resolved this month have been publicly disclosed or exploited according to Microsoft. ...
Vulnerability & Risk Management
VERT Research
VERT Threat Alert: June 2022 Patch Tuesday Analysis
Blog
Blog

VERT Threat Alert: April 2020 Patch Tuesday Analysis

By Tyler Reguly on Tue, 04/14/2020
Image Today’s VERT Alert addresses Microsoft’s April 2020 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-880 on Wednesday, April 15th. In-The-Wild & Disclosed CVEs CVE-2020-0935 A vulnerability in the OneDrive for Windows desktop application could allow an attacker to...
Vulnerability & Risk Management
VERT Research
Climbing the Vulnerability Management Mountain: Reaching Maturity Level 4
Blog
Blog

Climbing the Vulnerability Management Mountain: Reaching Maturity Level 4

By Lamar Bailey on Mon, 02/24/2020
Image The climb is getting steeper, but thanks to hard work, vision and insight are much keener. At ML:4, all assets are scanned by a combination of agent and remote scans on a normal cadence. This will generate a lot of data dictated by threat and patch priority. Thousands of new vulnerabilities are released each year, and no company...
Vulnerability & Risk Management
Climbing the Vulnerability Management Mountain: Reaching Maturity Level 3 – Base Camp
Blog
Blog

Climbing the Vulnerability Management Mountain: Reaching Maturity Level 3 – Base Camp

By Lamar Bailey on Sun, 01/05/2020
Image ML:3 is base camp, and getting here means you have reached a level that others have only dreamed about. At this level, the VM program is very good, and your visibility into threats to the environment is much better than it has ever been. Prioritizing Asset Assessment The biggest change at this level is the focus on the breadth...
Vulnerability & Risk Management
Climbing the Vulnerability Management Mountain: Reaching Maturity Level 2
Blog
Blog

Climbing the Vulnerability Management Mountain: Reaching Maturity Level 2

By Lamar Bailey on Mon, 12/02/2019
Image The path is starting to get steeper now as we climb to ML2. It is time to start defining a vulnerability management program with objectives and goals. This program is expected to grow and evolve over time as the organization grows and evolves. Document the requirements Start by documenting what is in place now and what...
Vulnerability & Risk Management
Five “W’s” for Vulnerability Management
Blog
Blog

Five “W’s” for Vulnerability Management

By Ben Layer on Sun, 12/01/2019
Image As we wind down 2019, it is a great time to think about your vulnerability management plans for the coming year. The five W’s can help guide our efforts as we resolve to improve our digital security for the coming new year. What Is Vulnerability Management? Vulnerability assessments are useful for detecting security issues...
Vulnerability & Risk Management
Climbing the Vulnerability Management Mountain: Taking the First Steps Towards Enlightenment
Blog
Blog

Climbing the Vulnerability Management Mountain: Taking the First Steps Towards Enlightenment

By Lamar Bailey on Mon, 08/19/2019
Image Just as you would map a hike or climb by creating waypoints you plan to hit each day, you must plan your vulnerability management process by creating similar goals. We call these goals Maturity Levels, from ML0 to ML5, as we defined them in the last blog. You have your asset inventory from an open-source tool, asset tracking...
Vulnerability & Risk Management
Cómo madurar un programa de gestión de vulnerabilidades
Blog
Blog

How to Build a Mature Vulnerability Management Program

By Anastasios Arampatzis on Sun, 08/11/2019
Image The evolution of the cyber threat landscape highlights the emerging need for organizations to strengthen their ability to identify, analyze and evaluate cyber risks before they evolve into full-fledged security incidents. When it comes to cyber risk mitigation, the terms “patch management” and “vulnerability management” are used...
Vulnerability & Risk Management
NCSC Active Cyber Defence Report 2019: Evidence Based Vulnerability Management
Blog
Blog

NCSC Active Cyber Defence Report 2019: Evidence Based Vulnerability Management

By Anastasios Arampatzis on Fri, 07/26/2019
Image On 16 July 2019, UK’s National Cyber Security Centre (NCSC) released the second annual report of the Active Cyber Defence (ACD) program. The report seeks to show the effects that the program has on the security of the UK public sector and the wider UK cyber ecosystem. The Active Cyber Defence Program NCSC was set up in 2016 to...
Vulnerability & Risk Management
Climbing the Vulnerability Management Mountain: Gearing Up and Taking Step One
Blog
Blog

Climbing the Vulnerability Management Mountain: Gearing Up and Taking Step One

By Lamar Bailey on Sun, 07/14/2019
Image As I discussed in the first blog in this series, the purpose of this series is to guide you on your journey up the Vulnerability Management Mountain (VMM). Like climbing a mountain, there is a lot of planning and work required, but when you get to the top, the view is amazing and well worth the journey. For the first phase, let...
Vulnerability & Risk Management
4 Fundamentals That Make Your Vulnerability Management (VM) Program Less Effective
Blog
Blog

4 Fundamentals That Make Your Vulnerability Management (VM) Program Less Effective

By Tripwire Guest Authors on Thu, 07/04/2019
Image If you are a security practitioner, then you may have noticed that much of the security industry exists because of vulnerabilities. Regardless of what job position you occupy, vulnerabilities are oftentimes the reason why you wake up every morning and ultimately engage infosec from within your cutting-edge working environment....
Vulnerability & Risk Management
How to Avoid Common Software Vulnerability Management Mistakes
Blog
Blog

How to Avoid Common Software Vulnerability Management Mistakes

By David Bisson on Sun, 06/30/2019
Image Vulnerability management (VM) is an essential process through which organizations can reduce risk in their environments. But myths and misconceptions surrounding VM abound. For instance, organizations commonly approach vulnerability management in the same way as they do patch management. Others are guilty of believing that all...
Vulnerability & Risk Management
Blog
Blog

What’s New and Changing in the World of Vulnerability Management?

By Lamar Bailey on Sun, 06/23/2019
According to CIS, “Organizations that do not scan for vulnerabilities and proactively address discovered flaws face a significant likelihood of having their computer systems compromised.” While vulnerability management (VM) isn’t new, I’ve seen it evolve a lot over my 22 years in the industry. Here are some big trends: Assets are Diversifying. Fast. The idea of an asset has...
Vulnerability & Risk Management
7-habits-of-highly-effective-VM.jpg
Blog
Blog

The 7 Habits of Highly Effective Vulnerability Management

By Former Tripwire Employee on Tue, 06/18/2019
Image On the surface, vulnerability management (VM) is nearly ubiquitous. If you ask someone whether their organization has VM, the vast majority will reply in the affirmative. In fact, Tripwire asked that very question in a recent survey on the topic. Eighty-eight percent of respondents said yes. Beneath that surface of ‘yes’...
Vulnerability & Risk Management