Search
Product Video

Watch a Demo of Tripwire Enterprise

Mon, 08/15/2022
Compliance frameworks are notoriously dense and complex, making them difficult to put into action. Compliance is also time-consuming—especially if you’re still attempting manual configuration of your systems, applications, databases and cloud assets. Manual configuration is error-prone and immediately out of date the moment an assessment ends. And a lack of compliance can result in failing audits,...
Compliance
CIS Controls
NIST
PCI DSS
Product Video

Enterprise Vulnerability Management in the Cloud

Mon, 08/15/2022
See how other organizations have simplified and automated compliance reporting processes, risk scoring and prioritized remediation efforts.
Cloud Security
Vulnerability & Risk Management
Product Video

Watch a Demo of Tripwire IP360

Mon, 08/15/2022
Managing the huge number of patches and updates issued by system vendors can seem like an impossible task. Tripwire IP360 allows you to automatically identify assets on your network and their associated vulnerabilities. It then provides granular risk scores based on the severity of the security risk, the ease of exploitation, and the age of the vulnerability. This enables you to direct your...
Malware on IBM Power Systems: What You Need to Know
Blog

Malware on IBM Power Systems: What You Need to Know

By Guest Authors on Thu, 07/28/2022
Malware – what are the threats? Malware can come from and in a variety of attack vectors. Besides using ‘traditional’ methods of spreading malware, adversaries can leverage more sophisticated methods to turn your Power System into a ‘malware host’. The key target is your data. Data is valuable, and organisations have paid at least $602 million to...
Black Hat USA 2022: What you need to know
Blog

Black Hat USA 2022: What you need to know

By Adam Parlett on Sun, 07/24/2022
Following a successful hybrid event in 2021 that saw more than 6,000 in-person, and more than 14,500 virtual attendees, Black Hat USA returns in 2022 to the Mandalay Bay Convention Centre in Las Vegas, Nevada. Now in its 25th year, this year’s event has three key components, each equally unmissable, namely these are Trainings, Briefings, and The...
Tripwire Patch Priority Index for August 2022
Blog

Tripwire Patch Priority Index for June 2022

By Lane Thames on Thu, 07/21/2022
Tripwire's June 2022 Patch Priority Index (PPI) brings together important vulnerabilities for Microsoft.First on the patch priority list this month is a patch for a remote code execution vulnerability in Edge.Next are patches for Office and Excel that resolve 3 information disclosure vulnerabilities and 1 remote code execution vulnerabilityUp next are...
HIPAA Compliance & The Security Rule
Blog

HIPAA Compliance & The Security Rule

By Dan Walsh on Tue, 07/19/2022
Within the HIPAA Security Rule are Administrative, Physical, and Technical Safeguards. These safeguards are as important to understand as they are to implement, so let’s get some clarifications for the non-initiated. Many healthcare entities and their business associates are routinely challenged with understanding and successfully implementing the...
Are your visuals making businesses more vulnerable to cybercrime?
Blog

Are your visuals making businesses more vulnerable to cybercrime?

By Guest Authors on Mon, 07/18/2022
In the world of modern business, companies must put extra effort into creating engaging visual content to stand out from the crowd. Social media marketing, for instance, was once deemed an easy way for companies to reach additional eyes but today, marketing is a lot more competitive than simply creating a post and hoping it goes viral. Entertaining...
Defense in Depth to minimize the impact of ransomware attacks
Blog

Defense in Depth to minimize the impact of ransomware attacks

By Guest Authors on Wed, 07/13/2022
Ransomware attacks continue to plague organizations globally regardless of their size. In a press release by the NCC group that preceded the Annual Threat Monitor Report 2021 published for the year 2021, there were an estimated 2,690 ransomware attacks, a 92.7% increase from 2020s figures of 1,389. The increase of ransomware attacks builds upon the...
File Integrity Monitoring (FIM): Your Friendly Network Detective Control
Blog

File Integrity Monitoring (FIM): Your Friendly Network Detective Control

By Mitch Parker on Mon, 07/11/2022
Lateral movement is one of the most consequential types of network activity for which organizations need to be on the lookout. After accessing a network, the attacker maintains ongoing access by essentially stirring through the compromised environment and obtaining increased privileges (known as “escalation of privileges”) using various tools and...
Using DevSecOps for Efficient IT Security
Blog

Using DevSecOps for Efficient IT Security

By Guest Authors on Sun, 07/10/2022
DevSecOps is the key to achieving effective IT security in software development. By taking a proactive approach to security and building it into the process from the start, DevSecOps ensures improved application security. It also allows organizations to rapidly develop application security with fewer bottlenecks and setbacks. Some critical aspects...
Lockdown Mode: Apple to protect users from targeted spyware attacks
Blog

Lockdown Mode: Apple to protect users from targeted spyware attacks

By Graham Cluley on Thu, 07/07/2022
Apple has previewed a new feature which aims to harden high-risk users from the serious threat of being spied upon by enemy states and intelligence agencies. "Lockdown Mode" is scheduled to arrive later this year with the release of Apple iOS 16 and macOS Ventura. It's an optional feature for users who believe their computers and smartphones face a...
The True Cost of a Security Breach
Blog

The True Cost of a Security Breach

By Bob Covello on Tue, 07/05/2022
There have been many articles about the cost of a security breach. With the emergence of privacy regulations that assign penalties based on a business’ profit, or those that calculate a value for each compromised record, it is possible to calculate the cost of a breach based on those metrics. However, it would seem that these hard numbers are not...
NIST SP 800-161r1: What You Need to Know
Blog

NIST SP 800-161r1: What You Need to Know

By Guest Authors on Tue, 06/21/2022
Modern goods and services rely on a supply chain ecosystem, which are interconnected networks of manufacturers, software developers, and other service providers. This ecosystem provides cost savings, interoperability, quick innovation, product feature diversity, and the freedom to pick between rival providers. However, due to the many sources of...
Q1 2022 Phishing Threat Trends and Intelligence Report
Blog

Q1 2022 Phishing Threat Trends and Intelligence Report

By Guest Authors on Mon, 06/20/2022
In 2022, phishing attacks have not only increased substantially, but they have also taken a new turn of events. According to the Agari and PhishLabs Quarterly Threat Trends & Intelligence report, phishing attacks are gradually being delivered through a wide range of online platforms. The classic email phishing attack technique has increased...
What you need to know about PCI 4.0: Requirements 1, 2, 3 and 4.
Blog

What you need to know about PCI 4.0: Requirements 1, 2, 3 and 4.

By David Bruce on Tue, 06/14/2022
The Payment Card Industry Security Standards Council has released its first update to their Data Security Standard (PCI DSS) since 2018. The new standard, version 4.0, is set to generally go into effect by 2024, but there are suggested updates that are not going to be required until a year after that. This, of course, creates a couple of problems...
Compliance
PCI DSS