Securing Your Industrial Network with Tripwire and Belden
This short video demonstrates how Tripwire® Enterprise and Tripwire Log Center® work with Tofino firewalls to secure industrial networks.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Tripwire
Study: DevOps Servers In The Wild Highlight Infrastructure Security Needs
A mature DevOps practice involves applying multiple tools at different steps of the delivery pipeline, and a new study from IntSights focuses on these tools that may be open to attack on the Internet. Each new tool added to your process can expand your attack surface area – and, in many cases, new development and delivery tools are being used without oversight from a security team.
Integrity Management: What It Is and How It Can Protect Your Data
In a previous article, I noted that organizations are witnessing a surge in integrity-based attacks targeting their networks. Enterprises can defend themselves against these types of threats by turning to the National Institute of Standards and Technology (NIST) Cybersecurity Framework. They can then pair the risk-based approach with NIST SP 800-53 and other security control catalogs that enable integrity management.
DevOps - The New Standard
Modern software systems are becoming increasingly complex. To meet the quality, availability, and security demands of the modern web, scalable infrastructure tools are necessary and these systems are changing rapidly to keep up with the needs of end-users.
Thousands of compromised websites spreading malware via fake updates
Malicious hackers have been exploiting thousands of legitimate websites since at least December 2017 in a sophisticated campaign that has disguised malware as fake software updates. Security researchers at MalwareBytes report that they have uncovered evidence of thousands of compromised websites running popular content management systems (CMS) such as SquareSpace, WordPress and Joomla.
Uncovering the True Intent of FIM
FIM has strayed from its intended purpose and become synonymous with "noise" because of the high volume of change data it indiscriminately produces. True FIM solutions should not only detect changes to files, but also help IT remediate unauthorized changes, reduce risk and maximize uptime.
PCI DSS 3.2 - Protecting Your Organization from the Next Big Ransomware Threat
As the number of Ransomware attacks continues to rise, retail and healthcare organizations are increasingly challenged to keep pace. Ensuring employees are aware of common attack types and staying vigilant in testing, patching and monitoring your systems can drain the resources of any team.
3 Emerging Innovations in Technology that Will Impact Cyber Security
The war between security experts charged with the responsibility of protecting information and cyber-criminals who threaten to compromise the integrity of data for different entities has become a cat and mouse game. For instance, as soon as white hats counter one form of malicious behavior using encryption tools, there is the almost immediate development of yet another malevolent form of threat for information systems.
20 CIS Controls: Control 18 - Application Software Security
Today, I will be going over Control 18 from version 7 of the top 20 CIS Controls – Application Software Security. I will go through the eleven requirements and offer my thoughts on what I’ve found.
20 CIS Controls: Control 19 - Incident Response and Management
Today, I will be going over Control 19 from version 7 of the top 20 CIS Controls – Incident Response and Management. I will go through the eight requirements and offer my thoughts on what I’ve found.