Resources

CISA Publishes Advisory on Improving Network Monitoring and Hardening.
Blog

CISA Publishes Advisory on Improving Network Monitoring and Hardening

By Anastasios Arampatzis on Wed, 04/12/2023
CISA released in late February a cybersecurity advisory on the key findings from a recent Cybersecurity and Infrastructure Security Agency (CISA) red team assessment to provide organizations recommendations for improving their cyber posture. According to the Agency, the necessary actions to harden their environments include monitoring network...
Vulnerability & Risk Management
Cybersecurity
Incident Detection & Investigation
30-ransomware-prevention-tips-bw
Blog

30 Ransomware Prevention Tips

By Tripwire Guest Authors on Tue, 04/11/2023
Dealing with the aftermath of ransomware attacks is like Russian roulette. Submitting the ransom might seem like it’s the sole option for recovering locked data. Ransomware also continues to evolve as a threat category within the past year, with old names like REvil rearing their heads and new players like Black Basta emerging in 2022. Malicious...
Vulnerability & Risk Management
Cybersecurity
Incident Detection & Investigation
Securing your Digital Life: MFA, Password Managers and Risk
Blog

Securing your Digital Life: MFA, Password Managers and Risk

By Editorial Staff on Wed, 04/05/2023
In security, there are always tensions; the balancing act between security, convenience, and functionality. While these three, often competing interests cause many people to become frustrated, there are some simple steps that can ease the security struggle: Any Multi-Factor Authentication (MFA) is better than no MFA. Any password manager is...
Cybersecurity
Distributed Energy Resources and Grid Security
Blog

Distributed Energy Resources and Grid Security

By Tripwire Guest Authors on Tue, 04/04/2023
As the United States government, the energy industry, and individual consumers work toward cleaner and more sustainable energy solutions, it is crucial to consider how new and advancing technologies affect, and are affected by, cybersecurity concerns. ­­­­Increasing use of smart energy devices can be useful for consumers to have more control over...
Cybersecurity
Industrial Control Systems
5 Secure Ways to Avoid Crypto Theft in 2023
Blog

5 Secure Ways to Avoid Crypto Theft in 2023

By Tripwire Guest Authors on Mon, 04/03/2023
The rise in popularity of cryptocurrencies has brought about significant concerns regarding wallet vulnerabilities and digital theft among individuals and businesses transacting in the market. While the meteoric rise in the value of cryptocurrency has attracted legitimate investors, it has also caught the attention of malicious actors who are...
Cybersecurity
How-to-Secure-Your-Mobile-Device-in-Six-Steps
Blog

How to Secure Your Mobile Device: 8 Tips for 2023

By Tripwire Guest Authors on Tue, 03/28/2023
The rapidly changing technology and portability of mobile devices have forced people to rely heavily on those products. With their increased functionalities, mobile devices carry out a number of our day-to-day activities, such as surfing the web, booking appointments, setting up reminders, sharing files, instant messaging, video calling, and even...
Cybersecurity
Motivations for Insider Threats: What to Watch Out For
Blog

Motivations for Insider Threats: What to Watch Out For

By Tripwire Guest Authors on Tue, 03/28/2023
While a majority of discourse in the cybersecurity industry is focused on external threats – malicious hacking, phishing, and the like – the fact is that internal actors are just as capable of causing damage to an enterprise, if not more so. An insider threat may have access to resources or areas of the network that someone outside the organization...
Cybersecurity
Guide

2023 Zero Trust Security Report

The concept of Zero Trust is quickly gaining momentum among enterprise IT security teams, with 87 percent saying their organizations have zero trust access in place and projects underway or planned. The 2023 Zero Trust Security Report reveals how enterprises are implementing zero trust security in their organizations, including key drivers, adoption trends, technologies, investments, and benefits...
Cybersecurity
5 Key Components of Cybersecurity Hardening
Blog

5 Key Components of Cybersecurity Hardening

Wed, 03/22/2023
Hardening in Cybersecurity Cybersecurity hardening is a comprehensive approach to keeping your organization safe from intruders, and mitigating risk. By reducing your attack surface, vulnerability is reduced in tandem. Hardening (or system hardening) considers all flaws and entry points potentially targeted by attackers to compromise your system....
Cybersecurity
Key Findings: UK Cybersecurity Breaches Survey 2022
Blog

Key Findings: UK Cybersecurity Breaches Survey 2022

By Tripwire Guest Authors on Tue, 03/21/2023
The cybersecurity landscape is continuously evolving. It has led businesses to question how they are protecting themselves and their consumers from data breaches. Since 2014, the Department for Digital, Culture, Media and Sport (DCMS) has commissioned the Cybersecurity Breaches Survey of the UK to understand what protections are in place, and...
Cybersecurity
A-Look-at-The-2023-Global-Automotive-Cybersecurity-Report
Blog

A Look at The 2023 Global Automotive Cybersecurity Report

By Tripwire Guest Authors on Mon, 03/20/2023
From its inception, the automotive industry has been shaped by innovation and disruption. In recent years, these transformations have taken shape in rapid digitization, ever-growing Electric Vehicle (EV) infrastructure, and advanced connectivity. These shifts have redirected the automotive industry, meeting and surpassing customer expectations for...
Cybersecurity
Industrial Control Systems
keys
Blog

Free decryptor released for Conti-based ransomware following data leak

By Graham Cluley on Fri, 03/17/2023
Security researchers have released a new decryption tool that should come to the rescue of some victims of a modified version of the Conti ransomware, helping them to recover their encrypted data for free. Conti was one of the most notorious ransomware groups, responsible for hundreds of attacks against organisations, which netted criminals over ...
Cybersecurity
What-is-CSAF
Blog

What is CSAF (Common Security Advisory Framework)?

By Tripwire Guest Authors on Wed, 03/15/2023
The world of security advisories is disjointed, with disparate systems holding critical documentation in various formats. To make matters more challenging, despite living in a digital-first era, most of these documents are not legible for machines and must be parsed, reviewed, or referenced by humans. As system administrators contend with a rapidly...
Cybersecurity
What-actually-is-database-integrity
Blog

What actually is database integrity?

By Faisal Parkar on Tue, 03/14/2023
If you were to poll the folks in a typical office about which aspect of the infamous CIA Triad was most important to them, you would likely get different answers from different people. While confidentiality, integrity, and availability are all important and serve to function together, for the sake of fun, what if you had to choose one factor as the...
Cybersecurity
Public-or-Private-Cloud-Choices-to-Consider
Blog

Public or Private Cloud: Choices to Consider

By Tripwire Guest Authors on Wed, 02/22/2023
Organizations are progressively moving towards a predominantly cloud-based computing environment. What this means is that essentially all of their back-end infrastructure, systems, and client-facing applications can be accessed and distributed through the cloud. Modern cloud computing goes a step further than simply being present in a virtual...
Cybersecurity
Why-Application-Dependencies-Are-Critical-for-Cloud-Security
Blog

Why Application Dependencies Are Critical for Cloud Security

By Tripwire Guest Authors on Mon, 02/20/2023
Application dependencies occur when technology components, applications, and servers depend on each other to provide a business solution or service. Developers have a specific technology stack in mind when building solutions. This can typically include operating systems, database engines, and development frameworks (such as .Net or Java), as well as...
Cybersecurity
Four-of-the-Oldest-Tricks-in-Scammers-Books
Blog

Four of the Oldest Tricks in Scammers’ Books

By Tripwire Guest Authors on Thu, 02/16/2023
As the world grows increasingly digital and dependent on the internet, cyberthreats are constantly evolving to clash with newer and more rigid security features. Despite cybercriminals’ propensity for finding new and innovative ways to take advantage of their targets, however, there are also tactics that have been in use since the early days of the...
Cybersecurity
The-Language-of-Cybersecurity-Frameworks-Guidance-Regulations-and-Standards
Blog

The Language of Cybersecurity Frameworks, Guidance, Regulations, and Standards

By Bob Covello on Wed, 02/15/2023
When it comes to acronyms, Technology and Cybersecurity often rival various branches of government. Technology acronyms are usually somewhat bland, amounting to little more than the arcane argot of the profession, such as SOC, SIEM, and DNS. Government, however, rarely disappoints in its inventiveness, whether it is the acronym of the Puppies...
Cybersecurity
Compliance
How-to-achieve-and-maintain-data-compliance-in-2023
Blog

How to achieve and maintain data compliance in 2023

By Tripwire Guest Authors on Wed, 02/15/2023
The Compliance Landscape Only those hiding from the news, prospects, and customers can miss the data security and privacy challenges that are occurring. More businesses are relying on data analytics (garnered from data collection) for more and improved service and product offerings. More individuals want data privacy and security. More nations...
Cybersecurity