Search

Fortra Webinar
On-Demand Webinar

FIM Isn’t Just for Files Anymore

Mon, 08/05/2024
File integrity monitoring was invented by Tripwire’s founder over 25 years ago and has evolved over time to become one of the most important security controls — so critical, in fact, that it’s required by major compliance standards like the Payment Card Industry Data Security Standard (PCI DSS). But what a lot of cybersecurity professionals aren’t familiar with is how FIM has expanded to include a...
File Integrity & Change Monitoring
Securing Diverse Environments: Security Configuration Management
Blog

Securing Diverse Environments: Security Configuration Management

By Jay Thakkar on Tue, 07/23/2024
In our technologically advanced era, where cyber threats and data breaches are constantly evolving, it's crucial for companies to focus on Security Configuration Management (SCM) to protect their resources and information. Whether dealing with infrastructure, cloud services, industrial installations, or outsourced solutions, each environment presents unique security challenges that require...
Cybersecurity
Security Configuration Management
Navigating PCI DSS 4.0: Your Guide to Compliance Success
Blog

Navigating PCI DSS 4.0: Your Guide to Compliance Success

By Kirsten Doyle on Mon, 07/29/2024
The transition to PCI DSS 4.0 is here. The transition period from PCI DSS 3.2 ended on March 31, 2024, so businesses in all sectors must focus on aligning their practices with the new requirements.This blog will guide you through the key points discussed by PCI experts Steven Sletten and Jeff Hall in a recent webinar held by Fortra on "PCI 4.0 is Here: Your Guide to Navigating Compliance Success....
Compliance
PCI DSS
Updates and Evolution of the NIST Cybersecurity Framework: What’s New?
Blog

Updates and Evolution of the NIST Cybersecurity Framework: What’s New?

By Josh Breaker-Rolfe on Wed, 08/14/2024
The NIST Cybersecurity Framework (CSF), published by the US National Institute of Standards and Technology (NIST), is a widely used set of guidelines for mitigating organizational cybersecurity risks. It contains recommendations and standards to help organizations identify and detect cyberattacks and advice on how to respond, prevent, and recover from cybersecurity incidents.Since Version 1.0’s...
Cybersecurity
Compliance
NIST
Cybersecurity: The Unsung Hero of SOX Compliance
Blog

Cybersecurity: The Unsung Hero of SOX Compliance

By Kirsten Doyle on Mon, 08/05/2024
The Sarbanes-Oxley Act of 2002 (SOX) was enacted to restore public confidence in the wake of major corporate and accounting scandals. The legislation aims to protect investors by improving the accuracy and reliability of corporate disclosures made pursuant to the securities laws.One key aspect of SOX compliance is ensuring the integrity and security of financial data. In the digital age,...
Compliance
SOX
10 Authentication Trends in 2024 and Beyond
Blog

10 Authentication Trends in 2024 and Beyond

By Gilad David Maayan on Mon, 08/19/2024
What Is Authentication?Authentication is the process of verifying the identity of a user or system. It is a critical component of security, ensuring that only authorized individuals or entities can access sensitive information or systems.There are several methods of authentication, including knowledge-based factors (something you know, like a password), possession-based factors (something you have...
Cybersecurity
Security Configuration Management
How Automation and AI are Transforming GRC Management
Blog

How Automation and AI are Transforming GRC Management

By Joseph Chukwube on Tue, 08/27/2024
There is no doubt that we now live in an AI-driven, automation-powered world. Across industries and markets, leaders and professionals are achieving the utility of AI in their processes. The same applies to Governance, Risk, and Compliance (GRC) management, but when one looks at the actual implementation, the data shows that there's still a long way to go.According to one recent report, only 21%...
Cybersecurity
Compliance
SOX Compliance in the Age of Cyber Threats
Blog

SOX Compliance in the Age of Cyber Threats

By Steven Sletten on Tue, 09/10/2024
Achieving Sarbanes-Oxley (SOX) Act compliance is becoming more difficult. While the Act is primarily a financial reporting regulation, it requires all publicly traded companies operating in the United States to maintain the integrity, accuracy, and reliability of financial reporting, which those organizations can only achieve through robust cybersecurity measures. As such, an effective...
Cybersecurity
Compliance
SOX
Tripwire VERT
Blog

VERT Threat Alert: April 2024 Patch Tuesday Analysis

By Tyler Reguly on Tue, 04/09/2024
Today’s VERT Alert addresses Microsoft’s April 2024 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-1101 as soon as coverage is completed. In-The-Wild & Disclosed CVEs CVE-2024-26234 This CVE describes a Proxy Driver Spoofing Vulnerability that, thanks to Microsoft’s new CWE listings, we...
Vulnerability & Risk Management
VERT Research
UK IT Leaders Are Prioritizing Cybersecurity: But Is This a Good Thing?
Blog

UK IT Leaders Are Prioritizing Cybersecurity: But Is This a Good Thing?

By Josh Breaker-Rolfe on Wed, 04/24/2024
Tech leaders taking cybersecurity seriously is something of a double-edged sword. While it’s undoubtedly good that organizations are waking up to the genuine threat cyberattacks pose, it’s depressing that they must siphon off so many resources to protect themselves rather than using them for growth and innovation. A recent survey of UK technology...
Cybersecurity
all-for-one-and-one-for-all-the-eu-cyber-solidarity-act-strengthens-digital-defense
Blog

"All for One and One for All": The EU Cyber Solidarity Act Strengthens Digital Defenses

By Anastasios Arampatzis on Wed, 04/24/2024
Alexandre Dumas's timeless novel "The Three Musketeers" immortalized the ideal of unyielding solidarity, the enduring motto "All for one and one for all." In the face of ever-evolving threats in the digital realm, the European Union echoes this spirit with its landmark Cyber Solidarity Act. This new legislation recognizes that collective defense is...
Cybersecurity
Compliance
Ensuring Privacy in the Age of AI: Exploring Solutions for Data Security and Anonymity in AI
Blog

Ensuring Privacy in the Age of AI: Exploring Solutions for Data Security and Anonymity in AI

By Dilki Rathnayake on Mon, 05/06/2024
With the widespread use of AI technology, numerous AI models gather and process vast amounts of data, much of which comprises personal information utilized to offer personalized experiences. However, this abundance of data poses inherent risks, particularly in terms of privacy and security. As AI systems become more sophisticated, the potential for...
Cybersecurity
Top 7 Cybersecurity Trends for Enterprises in 2024
Blog

Top 7 Cybersecurity Trends for Enterprises in 2024

By Joseph Chukwube on Wed, 05/22/2024
How can an organization prepare to be cyber-resilient in 2024? The major trends to look out for seem to focus mainly on AI. While the rise of generative AI indeed poses challenges, executives should be cautious not to miss other critical trends that will shape the cybersecurity landscape this year. AI-driven Social Engineering Since the advent of...
Cybersecurity
Insider Threats Maintain a Rising Trend
Blog

Insider Threats Maintain a Rising Trend

By Katrina Thompson on Tue, 05/14/2024
“When the cat’s away, the mouse will play,” the old adage goes. Filings to anti-fraud non-profit Cifas would support that claim, as Insider Threat Database (ITD) reports rose by 14% this past year and are largely attributable to hard-to-monitor work-from-home employees mixed with “increasing financial pressures.” The report details further incidents...
Cybersecurity
Incident Detection & Investigation
Security Configuration Management
Cloud-Sprawl-How-to-Tidy-It-Up
Blog

Cloud Sprawl: How to Tidy It Up

By Guest Authors on Tue, 05/28/2024
Cloud computing offers indisputable benefits, but with the caveat that it can quickly become a disorganized jumble unless adequately managed. It’s common for the average organization to use dozens of cloud instances, solutions, and resources scattered across multiple platforms. Such off-premises services quickly accumulate to accommodate the company...
Cybersecurity
Security Configuration Management
what-is-the-difference-between-fim-and-dlp
Blog

What Is the Difference between FIM and DLP?

By Wade Barisoff on Thu, 06/06/2024
Threats to sensitive data are everywhere. From sophisticated cybercriminal syndicates to accidental exposure to nation-state-backed advanced persistent threat (APT) groups and everything in between, it's never been more critical for organizations to have the correct data protection tools. When designing how to protect company information from loss...
Cybersecurity
File Integrity & Change Monitoring
Teh word firmware surrouned by hexagons containing technology icons
Blog

Firmware Monitoring is Just a Snapshot Away

By David Henderson on Mon, 03/18/2024
Any time the television news presents a story about cybersecurity, there is always a video of a large data center with thousands of blinking lights. Even most cybersecurity blogs will include an image of many lights on the front panels of servers, routers, and other hardware. However, most people don’t notice that the lights are usually green or...
Cybersecurity
File Integrity & Change Monitoring
Federated Learning for Cybersecurity: Collaborative Intelligence for Threat Detection
Blog

Federated Learning for Cybersecurity: Collaborative Intelligence for Threat Detection

By Guest Authors on Mon, 03/18/2024
The demand for innovative threat detection and intelligence approaches is more pressing than ever. One such paradigm-shifting technology gaining prominence is Federated Learning (FL). This emerging concept harnesses the power of collaborative intelligence, allowing disparate entities to pool their insights without compromising sensitive data. A...
Cybersecurity
Incident Detection & Investigation
Oops, Malware! Now What? Dealing with Accidental Malware Execution
Blog

Oops, Malware! Now What? Dealing with Accidental Malware Execution

By Dilki Rathnayake on Tue, 04/02/2024
On an ordinary day, you're casually surfing the web and downloading some PDF files. The document icons seem pretty legitimate, so you click without a second thought. But, to your surprise, nothing happens. A closer look reveals that what you believed to be a harmless PDF was, in fact, an executable file. Panic sets in as your settings lock up, and...
Cybersecurity
Incident Detection & Investigation