Blog
FBI warns of criminals attacking healthcare payment processors
By Graham Cluley on Thu, 09/15/2022
Millions of dollars have been stolen from healthcare companies after fraudsters gained access to customer accounts and redirected payments.
In a newly-published advisory directed at the healthcare payment industry, the FBI warns that cybercriminals are using a cocktail of publicly-available Personally Identifiable Information (PII) and social...
Blog
5 Potential Solutions to the Cybersecurity Talent Shortage
By Guest Authors on Sun, 05/08/2022
The most relevant cybersecurity threat to most businesses may be human, not technical. A sudden wave of cybercrime paired with longstanding tech labor challenges has created a cybersecurity skills gap, leaving companies without the expertise they need.Some companies lack dedicated security staff entirely, while others have a small, overworked...
Blog
$43 billion stolen through Business Email Compromise since 2016, reports FBI
By Graham Cluley on Thu, 05/05/2022
Over US $43 billion has been lost through Business Email Compromise attacks since 2016, according to data released this week by the FBI.
The FBI's Internet Crime Complaint Center (IC3) issued a public service announcement on May 4 2022, sharing updated statistics on Business Email Compromise (BEC) attacks which use a variety of social engineering...
Blog
A Tripwire Milestone: ASPL – 1000 is here
By Tyler Reguly on Wed, 05/04/2022
When I joined nCircle as a security researcher in 2006, ASPL 117 had just been released. I missed the ASPL-100 release celebration, which included custom sweatshirts, but there was still one unclaimed shirt in the office and I brought it home, my first piece of company swag. That shirt still hangs in my closet all these years later.
For those of you that are unaware, ASPL, Advanced Security...
Blog
PCI DSS 4.0 is Here: What you Need to Consider
By David Bruce on Tue, 04/26/2022
The Payment Card Industry Data Security Standard (PCI DSS) is a benchmark with tenure in the industry, with the first version being introduced in 2004. The PCI DSS was unique when it was introduced because of its prescriptive nature and its focus on protecting cardholder data. Cybersecurity is a changing landscape, and prescriptive standards must be...
Blog
Improve your patching efficiency with Tripwire State Analyzer
By David Bruce on Mon, 04/25/2022
Organizations are always concerned with improving efficiencies to make business flow smoother. Some of the biggest inefficiencies in any business revolve around time wasted on operational tasks. Whether it is a stale accounting process, or something as trivial as routing phone calls to the proper department, saving time by improving a process can...
Guide
What Is CPS 234 and Who Needs to Comply with It?
In November 2018, the Australian Prudential Regulation Authority (APRA) released the Prudential Standard CPS 234 in direct response to the escalating attack landscape in the financial sector. APRA has understood these threats to be the direct result of banking services moving to more complex and heavily used digital platforms. The new standard emerged as an offshoot to the Notifiable Data Breach ...
Press Release
Tripwire Survey: Increase in connected devices is raising the stakes for industrial security
PORTLAND, Ore. – March 30, 2021 – Tripwire, Inc., a leading global provider of security and compliance solutions for enterprises and industrial organizations, today announced the results of a new research report that assessed the security of connected devices across enterprise environments in 2021. Conducted for Tripwire by Dimensional Research this month, the survey evaluated the opinions of 312...
Press Release
Nozomi Networks and Tripwire Announce Strategic Partnership
Industry leaders join forces to deliver fully integrated cybersecurity and compliance solutions for IT, OT and IoT environmentsSAN FRANCISCO and PORTLAND, OR, September 16, 2021 - Nozomi Networks Inc., the leader in OT and IoT security, and Tripwire, a leading global provider of security and compliance solutions for enterprises and industrial organizations, today announced they have partnered to...
Press Release
Tripwire Survey: Retailers Ramp Up Security Measures for 2020 Holiday Season
Majority of retail security professionals took additional IT security precautions this year, prepped earlier than usual
PORTLAND, Ore. – December 15, 2020 – Tripwire, Inc., a leading global provider of security and compliance solutions for enterprises and industrial organizations, today announced the results of a new research report that assessed retail cybersecurity programs in 2020. Conducted...
Press Release
Tripwire Survey: Security Professionals Think Federal Government Should Play a Bigger Role in Securing Private Sector
95% request additional action to ensure the security of data and systems of non-governmental organizations
PORTLAND, Ore.-Tripwire, Inc., a leading global provider of security and compliance solutions for enterprises and industrial organizations, today announced the results of a new research report that evaluated actions taken by the federal government to improve cybersecurity in 2021. Conducted...
Product Video
Chi-X Australia: Building Trust on the Back of Tripwire
Mon, 08/15/2022
Chi-X Australia is a securities and derivatives exchange transforming the Australian investment market through a focus on customers and innovation. The company delivers easy, cost-effective access to local and global investment opportunities. As a result, it has need for a scalable, flexible compliance and security solution that can enable it to function effectively around the world.
Chi-X needed...
Product Video
Intrusion Detection with Tripwire
Mon, 08/15/2022
Watch a short demonstration of RAM scraping: an exceedingly popular technique used by modern intruders in the retail sector to steal millions of credit cards. By watching this video, you'll understand how these attacks work, and also to see how their behavior can be caught and alerted upon with Tripwire Enterprise.
...
Tripwire Security and Compliance Services
Find the Right Cybersecurity Services For YouAre you just getting started with your Tripwire solution? Or are you a long-time customer seeking guidance on best practices? Tripwire service experts are ready to help you tackle your biggest cybersecurity and compliance challenges with a variety of flexible options tailored around you. Whether you need managed cybersecurity services, strategic advice,...
Datasheet
Security Hardening of Tripwire IP360 Appliances
The Tripwire® ExpertOpsSM Proxy Appliance is a secure and hardened platform that eliminates the need for customers to perform any type of operating system management. Tripwire’s appliance based approach reduces the level of effort and skills needed to maintain and operate network connections to Tripwire ExpertOps, all while maintaining a low-risk footprint.
General System Overview
The...
Datasheet
Tripwire Virtual & Cloud Appliances
Vulnerability Management For The Cloud
Tripwire® IP360™, our proactive vulnerability management solution, helps your IT security organization protect data and systems in corporate and cloud networks from vulnerabilities exploited by cyberthreats. Our solution provides comprehensive endpoint and network intelligence, and then applies advanced analytics to prioritize vulnerabilities. It flags the...
Datasheet
Tripwire Vulnerability Risk Metrics
A vulnerability management program should provide a series of metrics that outline the vulnerability risk to the organization and how the risk posture is trending. In addition to this, reports should be provided which show system owners which vulnerabilities pose the greatest risk to the organization and how to remediate them. This report outlines recommendations for vulnerability management...
Guide
Integrity: The True Measure of Enterprise Security
Federal cybersecurity integrity is often defined as the incorruptibility of data (as part of the CIA triad), and file integrity monitoring (FIM), a control which has become a compliance requirement in standards such as FISMA and PCI DSS. Read the full white paper to learn more.
Datasheet
Tripwire and HITRUST
The HITRUST CSF rationalizes relevant regulations and standards (such as NIST, CIS, and HIPAA) into a single overarching security and privacy framework. Now, with Tripwire® Enterprise, organizations can automate HITRUST CSF assessment and reduce the burden of compliance.
Any organization that collects or stores personally identifiable information (PII) faces a relentless stream of cyberattacks....