Case Study
How One IT Operations Team Upgraded its Vulnerability Management with Tripwire ExpertOps
Assessing and managing vulnerabilities is a core cybersecurity practice, but it can put a heavy strain on IT security and operations teams. In many cases, introducing vulnerability management as a service is what’s necessary to overcome the challenge of accumulating vulnerabilities across complex IT environments—especially when time and resources are limited.
This was the case for one mid-size U...
Case Study
Tripwire Enterprise Detects Solarwinds Vulnerability
2021 has been a pivotal year for cybersecurity and the emphasis that organizations have placed on its importance. Unfortunately, this push for heightened cybersecurity is reactive by nature, and is the result of a series of increasingly complicated and dangerous cyberattacks. Attacks have been successfully executed on institutions ranging from social media sites to utility plants and are projected...
Blog
Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of August 1, 2022
By Andrew Swoboda on Mon, 08/08/2022
All of us at Tripwire’s Vulnerability Exposure and Research Team (VERT) are constantly looking out for interesting stories and developments in the infosec world. Here’s what cybersecurity news stood out to us during the week of August 1st, 2022. I’ve also included some comments on these stories.
Windows 11 Smart App Control blocks files used to...
Blog
VERT Threat Alert: September 2022 Patch Tuesday Analysis
By Tyler Reguly on Tue, 09/13/2022
Today’s VERT Alert addresses Microsoft’s September 2022 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-1021 on Wednesday, September 14th.
In-The-Wild & Disclosed CVEs
CVE-2022-23960
The first disclosed vulnerability this month is Spectre-BHB that is discussed in great detail on arm...
Blog
VERT Threat Alert: January 2022 Patch Tuesday Analysis
By Tyler Reguly on Tue, 01/11/2022
Today’s VERT Alert addresses Microsoft’s January 2022 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-981 on Wednesday, January 12th.
In-The-Wild & Disclosed CVEs
CVE-2022-21919
This vulnerability was a bypass to CVE-2021-34484, released by the same researcher, Abdelhamid Naceri. The...
Blog
VERT Threat Alert: July 2021 Patch Tuesday Analysis
By Tyler Reguly on Wed, 07/14/2021
Today’s VERT Alert addresses Microsoft’s July 2021 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-954 on Wednesday, July 14th.In-The-Wild & Disclosed CVEsCVE-2021-34527The vulnerability dubbed PrintNightmare was patched prior to the Tuesday patch drop, but it is still worth including here....
Blog
CIS Control 09: Email and Web Browser Protections
By Matthew Jerzewski on Wed, 12/11/2024
Web browsers and email clients are used to interact with external and internal assets. Both applications can be used as a point of entry within an organization. Users of these applications can be manipulated using social engineering attacks. A successful social engineering attack needs to convince users to interact with malicious content. A successful attack could give an attacker an entry point...
Blog
Common Phishing Attacks and How to Protect Against Them
By Kirsten Doyle on Wed, 09/11/2024
Phishing is a malicious attempt to deceive individuals into divulging sensitive information such as usernames, passwords, credit card numbers, or other personal data. These attacks are typically carried out by masquerading as a trustworthy entity in electronic communications. Phishing can take many forms and has evolved to become more sophisticated, making it imperative for individuals and...
Blog
Extra, Extra, VERT Reads All About It: Cybersecurity News for the week of September 27, 2021
By Tyler Reguly on Mon, 10/04/2021
All of us at Tripwire’s Vulnerability Exposure and Research Team (VERT) are constantly reviewing the news for interesting stories and developments in the cybersecurity world. Here’s what stood out to us during the week of September 27, 2021. We’ve also included the comments from a few folks here at Tripwire VERT.
REvil Ransomware Group Goes...
Blog
What Are the Benefits of Adopting the Cloud in Industrial Cybersecurity?
By Joe Pettit on Tue, 03/01/2022
Cloud adoption has come a long way from its early days where corporate executives questioned the stewardship of their data. The initial suspicions of “where’s my data” have been laid to rest, as administrative tools and contractual obligations have emerged to give better visibility to, and accountability of, data custodianship. Even the capabilities...
Blog
Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of February 7, 2022
By Andrew Swoboda on Mon, 02/14/2022
All of us at Tripwire’s Vulnerability Exposure and Research Team (VERT) are constantly looking out for interesting stories and developments in the infosec world. Here’s what cybersecurity news stood out to us during the week of February 7, 2022. I've also included some comments on these stories.
Mac Trojan Comes with Expanded Ability to Drop...
Blog
VERT Threat Alert: February 2022 Patch Tuesday Analysis
By Tyler Reguly on Tue, 02/08/2022
Today’s VERT Alert addresses Microsoft’s February 2022 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-985 on Wednesday, February 9th.
In-The-Wild & Disclosed CVEs
CVE-2022-21989
This month, only a single vulnerability, CVE-2022-21989 has been publicly disclosed and Microsoft is not...
Blog
Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of March 21, 2022
By Editorial Staff on Mon, 03/28/2022
All of us at Tripwire’s Vulnerability Exposure and Research Team (VERT) are constantly looking out for interesting stories and developments in the infosec world. Here’s what cybersecurity news stood out to us during the week of March 21, 2022. I’ve also included some comments on these stories.
Misconfigured Firebase Databases Exposing Data In...
Blog
Extra, Extra, VERT Reads All About It: Cybersecurity News for the Week of May 30, 2022
By Andrew Swoboda on Mon, 06/06/2022
All of us at Tripwire’s Vulnerability Exposure and Research Team (VERT) are constantly looking out for interesting stories and developments in the infosec world. Here’s what cybersecurity news stood out to us during the week of May 30, 2022. I’ve also included some comments on these stories.
Vendor Refuses to Remove Backdoor Account That Can...
Blog
N-Day Vulnerabilities: How They Threaten Your ICS Systems' Security
By David Bisson on Mon, 11/02/2020
In the last quarter of 2019, researchers at ClearSky uncovered an attack operation that they dubbed the “Fox Kitten Campaign.” Iranian actors used this offensive to gain persistent access into the networks of dozens of companies operating in Israel and around the world across the IT, telecommunication, oil and gas, aviation, government and security...
Blog
VERT Threat Alert: June 2020 Patch Tuesday Analysis
By Tyler Reguly on Tue, 06/09/2020
Today’s VERT Alert addresses Microsoft’s June 2020 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-888 on Wednesday, June 10th.
In-The-Wild & Disclosed CVEs
None of the vulnerabilities resolved this month have been publicly disclosed or exploited according to Microsoft.
CVE Breakdown by...
Blog
VERT Threat Alert: March 2021 Patch Tuesday Analysis
By Tyler Reguly on Tue, 03/09/2021
Today’s VERT Alert addresses Microsoft’s March 2021 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-933 on Wednesday, March 10th.
In-The-Wild & Disclosed CVEs
CVE-2021-26855
CVE-2021-26857
CVE-2021-26858
CVE-2021-27065
These CVEs are part of the bundle of Exchange vulnerabilities that...
Blog
VERT Threat Alert: January 2021 Patch Tuesday Analysis
By Tyler Reguly on Tue, 01/12/2021
Today’s VERT Alert addresses Microsoft’s January 2021 Security Updates. VERT is actively working on coverage for these vulnerabilities and expects to ship ASPL-922 on Wednesday, January 13th.
In-The-Wild & Disclosed CVEs
CVE-2021-1647
A vulnerability in the Microsoft Malware Protection Engine (MMPE) is currently seeing active exploitation. Since...
Blog
Forensics in the Cloud: What You Need to Know
By Guest Authors on Tue, 08/20/2019
Cloud computing has transformed the IT industry, as services can now be deployed in a fraction of the time that it used to take. Scalable computing solutions have spawned large cloud computing companies such as Amazon Web Services (AWS), Google Cloud and Microsoft Azure.
With a click of a button, personnel can create or reset entire infrastructure...