Resources

VERT Threat Alert: June 2022 Patch Tuesday Analysis
Blog

VERT Threat Alert: October 2020 Patch Tuesday Analysis

By Tyler Reguly on Tue, 10/13/2020
Image Today’s VERT Alert addresses Microsoft’s October 2020 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-909 on Wednesday, October 14th. In-The-Wild & Disclosed CVEs (October 2020 Patch Tuesday Analysis) CVE-2020-16938 This CVE describes an information disclosure in the...
Vulnerability & Risk Management
VERT Research
VERT Threat Alert: June 2022 Patch Tuesday Analysis
Blog

VERT Threat Alert: September 2020 Patch Tuesday Analysis

By Tyler Reguly on Tue, 09/08/2020
Image Today’s VERT Alert addresses Microsoft’s September 2020 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-903 on Wednesday, September 9th. In-The-Wild & Disclosed CVEs There were no in-the-wild or disclosed CVEs included in this month’s security guidance. CVE Breakdown...
Vulnerability & Risk Management
VERT Research
VERT Threat Alert: June 2022 Patch Tuesday Analysis
Blog

VERT Threat Alert: August 2020 Patch Tuesday Analysis

By Tyler Reguly on Tue, 08/11/2020
Image Today’s VERT Alert addresses Microsoft’s August 2020 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-899 on Wednesday, August 12th. In-The-Wild & Disclosed CVEs CVE-2020-1464 A vulnerability exists in the way that Windows validates file signatures. An attacker could...
Vulnerability & Risk Management
VERT Research
Press Release

Tripwire Eases Government Resource Constraints with New FedRAMP-Certified Managed Services Solution

Tripwire ExpertOps Federal reduces both the workload and complexity of managing an agency’s critical security controls. PORTLAND, Ore. – August 3, 2020 – Tripwire, Inc., a global cybersecurity solutions provider protecting the world’s leading organizations, today announced the launch of Tripwire® ExpertOps℠ Federal a FedRAMP-certified managed services solution that augments...
Press Release

Tripwire’s IP360™ Vulnerability Management Solution Awarded 5-Star Review from SC Media

SC Lab testers give Tripwire IP360 top rating, highlighting sophisticated reporting and risk prioritization. PORTLAND, Ore. – July, 27, 2020 – Tripwire, Inc., a global cybersecurity solutions provider protecting the world’s leading organizations, today announced that its vulnerability management solution Tripwire® IP360™ received a five-star rating by SC Media. “Vulnerability...
VERT Threat Alert: June 2022 Patch Tuesday Analysis
Blog

VERT Threat Alert: July 2020 Patch Tuesday Analysis

By Tyler Reguly on Tue, 07/14/2020
Image Today’s VERT Alert addresses Microsoft’s July 2020 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-895 on Wednesday, July 15th. In-The-Wild & Disclosed CVEs  CVE-2020-1463 A vulnerability in the SharedStream Library could allow a locally authenticated attacker to run a...
Vulnerability & Risk Management
VERT Research
Design & Implementation of OEM ICS Cybersecurity Frameworks: The Good, The Bad, and The Ugly
Blog

Design & Implementation of OEM ICS Cybersecurity Frameworks: The Good, The Bad, and The Ugly

By Editorial Staff on Sun, 07/05/2020
Image The cyber threat landscape today continues to pose a myriad of unique challenges. This is especially the case for industrial organizations due to factors such as aging equipment, poor design or implementation, skills gaps and a lack of visibility. These shortcomings are exacerbated by the mean time to breach detection, which...
Cybersecurity
Industrial Control Systems
A Checklist for Preparing for Your Organization's Next PCI Audit
Blog

A Checklist for Preparing for Your Organization's Next PCI Audit

By Anthony Israel-Davis on Wed, 07/01/2020
Image Organizations cannot afford to neglect their PCI compliance obligations. According to its website, PCI could punish offending organizations with a monetary penalty ranging in value from $5,000 to $100,000 per month. These fines could spell the end for a small business. Acknowledging those consequences, organizations need to make...
Compliance
PCI DSS
VERT Threat Alert: June 2022 Patch Tuesday Analysis
Blog

VERT Threat Alert: June 2020 Patch Tuesday Analysis

By Tyler Reguly on Tue, 06/09/2020
Image Today’s VERT Alert addresses Microsoft’s June 2020 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-888 on Wednesday, June 10th. In-The-Wild & Disclosed CVEs None of the vulnerabilities resolved this month have been publicly disclosed or exploited according to Microsoft....
Vulnerability & Risk Management
VERT Research
Why Privacy Matters in Cybersecurity
Blog

The Perimeter Really Is Gone - CIS Controls and COVID-19 with Tony Sager

By Editorial Staff on Mon, 05/18/2020
Image Tony Sager, Senior Vice President and Chief Evangelist at CIS (Center for Internet Security) joins us to discuss the best approaches to the changing security landscape in the wake of COVID-19. Tony is a lifelong defender, with more than 44 years of experience. He spent most of his career at the NSA and now leads the development...
Compliance
CIS Controls
VERT Threat Alert: June 2022 Patch Tuesday Analysis
Blog

VERT Threat Alert: May 2020 Patch Tuesday Analysis

By Tyler Reguly on Tue, 05/12/2020
Image Today’s VERT Alert addresses Microsoft’s May 2020 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-884 on Wednesday, May 13th. In-The-Wild & Disclosed CVEs None of the vulnerabilities resolved this month have been publicly disclosed or exploited according to Microsoft. ...
Vulnerability & Risk Management
VERT Research
VERT Threat Alert: June 2022 Patch Tuesday Analysis
Blog

VERT Threat Alert: April 2020 Patch Tuesday Analysis

By Tyler Reguly on Tue, 04/14/2020
Image Today’s VERT Alert addresses Microsoft’s April 2020 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-880 on Wednesday, April 15th. In-The-Wild & Disclosed CVEs CVE-2020-0935 A vulnerability in the OneDrive for Windows desktop application could allow an attacker to...
Vulnerability & Risk Management
VERT Research
Cybersecurity in Education (K-12) with the CIS Controls
Blog

Cybersecurity in Education (K-12) with the CIS Controls

By Editorial Staff on Mon, 04/13/2020
Image Why is cybersecurity important to Education? Acknowledging recent reports of ransomware targeting educational institutions, it is no wonder that there have also been articles that attempt to lure in readers with “free” tools. What is disappointing is that these “free” tools are little more than marketing pieces that direct you...
Cybersecurity
Compliance
CIS Controls
Climbing the Vulnerability Management Mountain: Reaching Maturity Level 4
Blog

Climbing the Vulnerability Management Mountain: Reaching Maturity Level 4

By Lamar Bailey on Mon, 02/24/2020
Image The climb is getting steeper, but thanks to hard work, vision and insight are much keener. At ML:4, all assets are scanned by a combination of agent and remote scans on a normal cadence. This will generate a lot of data dictated by threat and patch priority. Thousands of new vulnerabilities are released each year, and no company...
Vulnerability & Risk Management
Blog

Verizon’s 2019 Payment Security Report – Not Just for PCI

By Anthony Israel-Davis on Tue, 12/03/2019
If you are responsible for cybersecurity or data protection in your organization, stop what you are doing and read this report. Actually, first, go patch your servers and applications and then read this report. Much like Verizon’s Data Breach Investigations Report (DBIR), the Payment Security Report (PSR) is a must-read for security professionals. While it focuses on the PCI...
Compliance
PCI DSS
Climbing the Vulnerability Management Mountain: Reaching Maturity Level 2
Blog

Climbing the Vulnerability Management Mountain: Reaching Maturity Level 2

By Lamar Bailey on Mon, 12/02/2019
Image The path is starting to get steeper now as we climb to ML2. It is time to start defining a vulnerability management program with objectives and goals. This program is expected to grow and evolve over time as the organization grows and evolves. Document the requirements Start by documenting what is in place now and what...
Vulnerability & Risk Management
Five “W’s” for Vulnerability Management
Blog

Five “W’s” for Vulnerability Management

By Ben Layer on Sun, 12/01/2019
Image As we wind down 2019, it is a great time to think about your vulnerability management plans for the coming year. The five W’s can help guide our efforts as we resolve to improve our digital security for the coming new year. What Is Vulnerability Management? Vulnerability assessments are useful for detecting security issues...
Vulnerability & Risk Management