Resources

bazarcall
Blog

Google Forms Used in Call-Back Phishing Scam

By Graham Cluley on Thu, 12/14/2023
What's happened? Researchers at Abnormal have discovered the latest evolution in call-back phishing campaigns. Call-back phishing? Traditional phishing emails might contain a malicious link or attachment, and lure recipients into clicking on them via social engineering techniques. Call-back phishing dupes unsuspecting victims into telephoning a...
Cybersecurity
Operational Resilience: What It Is and Why It's Important
Blog

Operational Resilience: What It Is and Why It's Important

By Nick Hogg on Wed, 12/13/2023
Frankly stated, operational resilience is your ability to climb the mountain, no matter the weather. Businesses now need more than a good security structure to weather the storms of AI-driven threats, APTs, cloud-based risks, and hyper-distributed environments. And more importantly, operational resilience in 2024 requires a paradigm shift....
Cybersecurity
File Integrity & Change Monitoring
Incident Detection & Investigation
Tips for Achieving Success With a NERC CIP Audit
Blog

Tips for Achieving Success With a NERC CIP Audit

By Jim Fisher on Wed, 12/13/2023
Electrical utilities are responsible for just about everything we do. This presents a tremendous burden on those who operate those utilities. One way these organizations offer assurance is through the audit process. While audits can generate tremendous anxiety, good planning, and tools can help make the entire process go smoothly. Moreover, these...
Cybersecurity
Compliance
NERC CIP
Kelvin Security hacking gang suspect seized by Spanish police
Blog

Kelvin Security cybercrime gang suspect seized by Spanish police

By Graham Cluley on Tue, 12/12/2023
A malicious hacking group, thought to have been operating since at least 2013, may have suffered a significant blow after the arrest of a suspected leading member by Spanish police late last week. Spain's National Police arrested a Venezuelan man in Alicante on Thursday, in the belief that he is connected to the Kelvin Security gang. In an...
Cybersecurity
The 2023 ISC2 Cybersecurity Workforce Study Delves into Cloud Security and AI
Blog

The 2023 ISC2 Cybersecurity Workforce Study Delves into Cloud Security and AI

By Katrina Thompson on Mon, 12/11/2023
The security industry is at a critical juncture. Capturing the state of affairs is a recent report released by the International Information System Security Certification Consortium, or ISC2. “A perfect storm” As they state in their Executive Summary, “Our study shows that a perfect storm of economic uncertainty, rapidly emerging technologies,...
Cybersecurity
Cloud Security
Blacksuit
Blog

BlackSuit ransomware - what you need to know

By Graham Cluley on Thu, 12/07/2023
What's going on? A cybercriminal group calling itself BlackSuit has claimed responsibility for a series of ransomware attacks, including breaches at schools in central Georgia. And earlier in the year, a zoo in Tampa Bay was targeted by the same hacking gang. Meanwhile, liberal arts college DePauw University in Indiana says that it was recently...
Cybersecurity
How to Avoid and Prevent Identity Theft
Blog

How to Avoid and Prevent Identity Theft

By Tripwire Guest Authors on Thu, 12/07/2023
Identity theft is like a thief in the night; it can happen to anyone, anywhere, at any time. It is a real threat to everyone. We live in a time where so much personal information is stored online, which allows cybercriminals to steal it and use it for their gain. A Federal Trade Commission report shows that over 1 million people fell victim to...
Cybersecurity
Quick Look at the New CISA Healthcare Mitigation Guide
Blog

Quick Look at the New CISA Healthcare Mitigation Guide

By Katrina Thompson on Tue, 12/05/2023
It’s the small vines, not the large branches, that trip us up in the forest. Apparently, it’s no different in Healthcare. In November, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) released a Mitigation Guide aimed at the Healthcare and Public Health (HPH) sector. In the midst of current hybrid cloud security challenges, hyper...
Cybersecurity
Compliance
Patch Priority Index
Blog

Tripwire Patch Priority Index for November 2023

By Lane Thames on Mon, 12/04/2023
Tripwire's November 2023 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft. First on the patch priority are patches for Microsoft Edge (Chromium-based) that resolve elevation of privilege, remote code execution, and spoofing vulnerabilities. Next on the patch priority list this month are patches for Microsoft...
Vulnerability & Risk Management
Cybersecurity
Understanding Mobile Payment Security
Blog

Understanding Mobile Payment Security

By Dilki Rathnayake on Mon, 12/04/2023
As the holiday shopping season kicks in, many are eager to secure early bird discounts and offers, preparing for the festive season. The convenience and speed of mobile devices has led to a growing number of individuals opting for mobile payments, whether conducted online or through contactless systems. The global mobile payment revenue is expected...
Cybersecurity
On-Demand Webinar

Top Security Misconfigurations to Watch Out For

Thu, 11/30/2023
Misconfigurations continue to be a leading cause of cybersecurity breaches. Luckily, you can prevent and correct them with the right knowledge and tools on your side. The National Security Agency (NSA) and Cybersecurity and Infrastructure Security Agency (CISA) recently released a joint cybersecurity advisory (CSA) sharing the most common misconfigurations observed by their Red and Blue team...
Cybersecurity
Security Configuration Management
ex-worker-phished-former-employer-to-hack-network-and-steal-data
Blog

Ex-worker phished former employer to illegally hack network and steal data

By Graham Cluley on Thu, 11/30/2023
Once again, companies are being warned to be wary of past employees who may turn rogue. 28-year-old Andrew Mahn, of Derry, New Hampshire, has pleaded guilty to charges that he illegally hacked the network of his former company, telecoms firm Motorola after he successfully tricked current staff into handing over their login credentials Mahn, who...
Cybersecurity
Holiday Shopping: Tips and Best Practices to Help you Stay Secure
Blog

Holiday Shopping: Tips and Best Practices to Help you Stay Secure

By Fortra Staff on Wed, 11/29/2023
As we approach the holiday season, in addition to our busy work schedules, we need to plan for family visits, develop menus for special meals, and do a little shopping while the deals are good! It’s a lot to keep track of. Just remember it’s when you are distracted that you tend to put your digital security most at risk. Cybercriminals don’t take...
Cybersecurity
Building Fortra as Your Cybersecurity Ally
Blog

Building Fortra as Your Cybersecurity Ally

By Jeff Moline on Wed, 11/29/2023
At our recent Energy and NERC Compliance Working Group, we took some time to share more about Fortra, the cybersecurity company that Tripwire is a part of. In case you missed it, Fortra is a rebranding of HelpSystems, an already established and trusted company that has acquired a few valuable cybersecurity companies along the way. One such company,...
Cybersecurity
Guide

What Cybersecurity Pros Think of Zero Trust Today

Zero trust isn’t a new model, but its influence on the cybersecurity industry has strengthened over time since 1994. Zero trust became especially top-of-mind a few years ago when remote work and cloud services took off, prompting organizational leaders to rethink the way they enforced cybersecurity controls in an increasingly perimeter-less world. Is zero trust just another cybersecurity buzzword...
Cybersecurity
QR Code Phishing –What Is It?
Blog

QR Code Phishing –What Is It?

By Steve Jeffery on Tue, 11/28/2023
Phishing is a longstanding danger of the digital world that most people are aware of. Whether it happens via email, text message, social media, or any other means, phishing presents a risk to all users. In recent years, the growing popularity of QR codes for all manner of operations has created an environment ripe for cybercriminals to take...
Cybersecurity
How Does NIST's AI Risk Management Framework Affect You?
Blog

How Does NIST's AI Risk Management Framework Affect You?

By Stefanie Shank on Tue, 11/28/2023
While the EU AI Act is poised to introduce binding legal requirements, there's another noteworthy player making waves—the National Institute of Standards and Technology's (NIST) AI Risk Management Framework (AI RMF), published in January 2023. This framework promises to reshape the future of responsible AI uniquely and voluntarily, setting it apart...
Cybersecurity
Compliance
Guarding the Grid: Navigating the Current and Future Landscape of Utility Cybersecurity
Blog

Guarding the Grid: Navigating the Current and Future Landscape of Utility Cybersecurity

By Travis Emerson on Mon, 11/27/2023
Tripwire recently held its annual Energy and NERC Compliance Working Group. This year's attendees included more than 200 Tripwire customer utility personnel representing over 80 different registered entities from all across the US and Canada. The company sizes ranged from public utility districts and city municipalities to medium and larger-sized...
Vulnerability & Risk Management
Cybersecurity
Compliance
NERC CIP
NIST NCCoE Publishes Cybersecurity Framework Profile for Hybrid Satellite Networks
Blog

NIST NCCoE Publishes Cybersecurity Framework Profile for Hybrid Satellite Networks

By Josh Breaker-Rolfe on Mon, 11/27/2023
In late September 2023, the US-based National Institute of Standards and Technology (NIST) published its Cybersecurity Framework Profile for Hybrid Satellite Networks, otherwise known as NIST IR 8441. This blog will explore the reasons behind NIST developing the framework, outline its intentions, and summarize its key points. What is a Hybrid...
Cybersecurity
Compliance
$9 million seized from "pig butchering" scammers who preyed on lonely hearts
Blog

$9 million seized from "pig butchering" scammers who preyed on lonely hearts

By Graham Cluley on Thu, 11/23/2023
US authorities have seized almost $9 million worth of cryptocurrency linked to a gang engaged in cryptocurrency investment fraud and romance scams. The US Department of Justice has announced that the seized funds are connected to cryptocurrency wallet addresses alleged to be associated with a "pig butchering" gang that has claimed over 70 victims...
Cybersecurity