Resources

Making Data Integrity Easy: Simplifying NIST CSF with Tripwire
Blog

Making Data Integrity Easy: Simplifying NIST CSF with Tripwire

By Dan Jamison on Mon, 05/20/2024
When you think of the cybersecurity "CIA" triad of Confidentiality, Integrity, and Availability, which one of those is most important to your organization? While the answer may vary by season for your organization, there is no argument that they are all equally vital sides of that CIA triangle, and each deserves the correct level of care and...
Cybersecurity
File Integrity & Change Monitoring
Security Configuration Management
Guide

What Experts Have to Say About Choosing the Right Cybersecurity Frameworks

Frameworks like the Center for Internet Security (CIS) Controls, MITRE ATT&CK and the National Institute of Standards and Technology (NIST) Cybersecurity Framework give organizations clear, step-by-step methodologies for protecting their sensitive data, leveraging a wealth of industry knowledge to take the guesswork out of your security program.While these cybersecurity frameworks aren’t mandatory...
Cybersecurity
Compliance
CIS Controls
NIST
Understanding the Key Differences Between FIM and EDR
Blog

Understanding the Key Differences Between FIM and EDR

By Wade Barisoff on Wed, 05/15/2024
File integrity monitoring (FIM) and endpoint detection and response (EDR) are two cybersecurity solutions that are often foundational aspects of organizations’ security strategies. EDR is implemented in order to stop known and unknown threats at endpoints, often with advanced functions such as behavioral monitoring and analysis, antivirus protection...
Cybersecurity
File Integrity & Change Monitoring
Insider Threats Maintain a Rising Trend
Blog

Insider Threats Maintain a Rising Trend

By Katrina Thompson on Tue, 05/14/2024
“When the cat’s away, the mouse will play,” the old adage goes. Filings to anti-fraud non-profit Cifas would support that claim, as Insider Threat Database (ITD) reports rose by 14% this past year and are largely attributable to hard-to-monitor work-from-home employees mixed with “increasing financial pressures.” The report details further incidents...
Cybersecurity
Incident Detection & Investigation
Security Configuration Management
The World Cybercrime Index: What is it and why is it important?
Blog

The World Cybercrime Index: What is it and why is it important?

By Josh Breaker-Rolfe on Mon, 05/13/2024
Cybercriminals are notoriously tricky to pin down. They are experts in obfuscation and misdirection, masters of avoiding consequences. Not since the early days of the Wild West have criminals managed to evade capture and maintain anonymity as effectively as modern cybercriminals do. Part of the reason for these staggeringly low conviction rates...
Cybersecurity
ANSI and the International Society of Automation Explained
Blog

ANSI and the International Society of Automation Explained

By Steven Sletten on Wed, 05/08/2024
As technologies advance and the world grows more complicated, collaboration and coordination have become increasingly important. Setting standards, sharing information, and bringing experts together are essential to safely developing technologies for national and global priorities, and the world needs organizations to fulfill this role. The...
Cybersecurity
Compliance
why-is-cyber-resilience-essential-and-whos-responsible-for-it
Blog

Why Is Cyber Resilience Essential and Who's Responsible for It?

By Zoë Rose on Tue, 05/07/2024
In the first installment of our series on cyber resilience, we discussed what being a resilient organization means. In this installment, we'll explore why organizations need to consider how to become resilient, who's responsible for achieving this, and the processes organizations must have to prioritize actions and effectively spend their budgets. ...
Cybersecurity
Security Configuration Management
Being Cybersmart is Always in Style
Blog

Being Cybersmart is Always in Style

By Fortra Staff on Tue, 05/07/2024
In 2022, the Security team at Microsoft published a cybersecurity awareness campaign named “#BeCyberSmart”. Even though that was two years ago, the same best practices still apply. Cybersecurity is an important part of our daily lives and can enable us to accomplish more while keeping our data and identity protected. Be CyberSmart Security starts...
Cybersecurity
The Impact of NIST SP 800-171 on SMBs
Blog

The Impact of NIST SP 800-171 on SMBs

By Josh Breaker-Rolfe on Mon, 05/06/2024
From more broad laws like GDPR to industry-specific regulations like HIPAA, most organizations today must comply with some kind of data protection guideline. Some businesses may even have to comply with numerous data protection regulations. As such, compliance with data protection regulations has become increasingly complicated. National Institute...
Cybersecurity
Compliance
NIST
Ensuring Privacy in the Age of AI: Exploring Solutions for Data Security and Anonymity in AI
Blog

Ensuring Privacy in the Age of AI: Exploring Solutions for Data Security and Anonymity in AI

By Dilki Rathnayake on Mon, 05/06/2024
With the widespread use of AI technology, numerous AI models gather and process vast amounts of data, much of which comprises personal information utilized to offer personalized experiences. However, this abundance of data poses inherent risks, particularly in terms of privacy and security. As AI systems become more sophisticated, the potential for...
Cybersecurity
Vulnerability Scanning vs. Penetration Testing
Blog

Vulnerability Scanning vs. Penetration Testing

By Babar Mahmood on Fri, 05/03/2024
In the modern digital landscape, cybersecurity is paramount, making the differentiation between vulnerability scanning and penetration testing essential for safeguarding organizational assets. Vulnerability scanning offers a broad sweep for potential security weaknesses, serving as an early warning system. Penetration testing takes a more targeted...
Vulnerability & Risk Management
Cybersecurity
Patch Priority Index
Blog

Tripwire Patch Priority Index for April 2024

By Lane Thames on Thu, 05/02/2024
Tripwire's April 2024 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft. Firsts on the list are patches for Microsoft Edge (Chromium-based) and Chromium that resolve 2 spoofing vulnerabilities. Next on the patch priority list this month is a patch for Microsoft Office and Excel that resolves spoofing and remote...
Vulnerability & Risk Management
Cybersecurity
cybersecurity-the-battle-of-wits
Blog

Cybersecurity: The Battle of Wits

By Kirsten Doyle on Thu, 05/02/2024
With cybersecurity, the digital battlegrounds stretch across the vast expanse of the internet. On the one side, we have increasingly sophisticated and cunning adversaries. On the other, skilled cybersecurity practitioners who are desperate to protect their companies’ assets at all costs. One fundamental truth rings clear: it’s an ongoing and...
Cybersecurity
Defending Against Supply Chain Spoofing in Critical Manufacturing
Blog

Defending Against Supply Chain Spoofing in Critical Manufacturing

By Isla Sibanda on Tue, 04/30/2024
Supply chain attacks are a serious and growing threat to businesses across all industries. However, these attacks pose an even greater risk for manufacturers in critical infrastructure sectors. One pernicious form of supply chain attack is spoofing, where attackers impersonate legitimate suppliers to sneak malicious code or components into products...
Cybersecurity
DMARC - The Next Step in Email Hygiene and Security
Blog

DMARC - The Next Step in Email Hygiene and Security

By Anirudh Chand on Tue, 04/30/2024
In 1971, Ray Tomlison developed the first email service while working at The Defense Advanced Research Projects Agency (DARPA). This development changed how we communicated. However, even though this was an exceptional tool, it was not very user-friendly, requiring users to have specific software installed on their computers. In 1996, Sabeer...
Cybersecurity
Machines-vs-Minds-The-Power-of-Human-Ingenuity-Against-Cyber-Threats
Blog

Machines vs Minds: The Power of Human Ingenuity Against Cyber Threats

By Kirsten Doyle on Mon, 04/29/2024
Most people remember the iconic movie Terminator, in which the cyborg T-800 was dispatched back in time from the year 2029 with the mission to eliminate Sarah Connor. She was destined to give birth to the future leader of the human resistance against machines, thus threatening their dominance. If Sarah were killed, humanity's fate would be sealed,...
Cybersecurity
database-security-best-practices-bw
Blog

10 Database Security Best Practices You Should Know

By Katrina Thompson on Mon, 04/29/2024
Statista shows a near doubling of data compromises between last year (3,205) and the year before (1,802). Cybercriminals go where the data goes, and there is more need than ever for effective database security measures. These tactics differ from network security practices, which rely heavily on software solutions and even employee best practices....
Cybersecurity
junk-ransomware
Blog

"Junk gun" ransomware: the cheap new threat to small businesses

By Graham Cluley on Thu, 04/25/2024
What's going on? A wave of cheap, crude, amateurish ransomware has been spotted on the dark web - and although it may not make as many headlines as LockBit, Rhysida, and BlackSuit, it still presents a serious threat to organizations. What's "junk gun" ransomware? It's a name coined by Sophos researchers for unsophisticated ransomware that is...
Cybersecurity