Author Archives: Tripwire Guest Authors

Cryptominers – The Next Generation

Posted on by

In less than a decade, cryptocurrency became almost mainstream. Many people are familiar with Bitcoin, which was the first decentralized digital currency. In fact, there are more than 10 different cryptocurrencies with a market cap exceeding 1 billion US dollars. Some are very similar, but others significantly differ in the mathematical and computational properties of […]… Read More

The post Cryptominers – The Next Generation appeared first on The State of Security.

The post Cryptominers – The Next Generation appeared first on Security Boulevard.

Continue reading Cryptominers – The Next Generation→

Potentially Unwanted Leaks: Social Engineering, Small Missteps, and Big Mistakes

Posted on by

In our previous article, we laid the groundwork for what we believe to be a serious threat to ICS/SCADA devices: social engineering. We continue here with some definitions, some of which you may already know.  Phishing Phishing is a relatively broad term for any attempt to trick victims into sharing sensitive information, such as passwords, […]… Read More

The post Potentially Unwanted Leaks: Social Engineering, Small Missteps, and Big Mistakes appeared first on The State of Security.

The post Potentially Unwanted Leaks: Social Engineering, Small Missteps, and Big Mistakes appeared first on Security Boulevard.

Continue reading Potentially Unwanted Leaks: Social Engineering, Small Missteps, and Big Mistakes→

Preparing for the GDPR Now? Have You Missed the Boat?

Posted on by

We are told that the secret to success in any field is preparation, a belief so well shared it is even accompanied by a renowned and expletive warning verse known as the seven Ps. It’s joyfully recited to anyone who fails to heed to such common advice by those who presumably have learned from their […]… Read More

The post Preparing for the GDPR Now? Have You Missed the Boat? appeared first on The State of Security.

The post Preparing for the GDPR Now? Have You Missed the Boat? appeared first on Security Boulevard.

Continue reading Preparing for the GDPR Now? Have You Missed the Boat?→

Women in Information Security: Carrie Roberts

Posted on by

Last time, I spoke to Katherine Teitler. She’s the director of content for MISTI Training Institute. She also helps run the InfoSec World conference. This time, I spoke with Carrie Roberts. She has a senior red team role with Walmart. She’s also a pretty good cartoonist if I say so myself. Kimberly Crawley: Tell me […]… Read More

The post Women in Information Security: Carrie Roberts appeared first on The State of Security.

The post Women in Information Security: Carrie Roberts appeared first on Security Boulevard.

Continue reading Women in Information Security: Carrie Roberts→

Word Crimes Part 1 – Taking on Compliance – Statutory vs Regulatory vs Contractual Compliance

Posted on by

Words have meaning. Cybersecurity and IT professionals routinely abuse the terms “policy” and “standard” as if they are synonymous. The same holds true for compliance terms since these terms tend to get thrown in the same bucket even though there are significant differences that should be kept in mind. Why Should You Care? Beyond just […]… Read More

The post Word Crimes Part 1 – Taking on Compliance – Statutory vs Regulatory vs Contractual Compliance appeared first on The State of Security.

The post Word Crimes Part 1 – Taking on Compliance – Statutory vs Regulatory vs Contractual Compliance appeared first on Security Boulevard.

Continue reading Word Crimes Part 1 – Taking on Compliance – Statutory vs Regulatory vs Contractual Compliance→

How Safe Are You on Public WiFi? Not Very

Posted on by

At the U.S. Republican National Convention in Cleveland last year, more than 1,200 people connected to free WiFi networks with names like “I Vote Trump! Free Internet,” “I Vote Hillary! Free Internet,” and “Xfinitywifi.” They transferred gigabytes of data, doing things like checking e-mails and chatting. Some even shopped on Amazon or logged into their […]… Read More

The post How Safe Are You on Public WiFi? Not Very appeared first on The State of Security.

The post How Safe Are You on Public WiFi? Not Very appeared first on Security Boulevard.

Continue reading How Safe Are You on Public WiFi? Not Very→

Industrial Cybersecurity: Addressing Today’s and Tomorrow’s Challenges

Posted on by

Industrial control system (ICS) cybersecurity has come a long way over the last decade. Today, we have well-established guidance for securing industrial plants and SCADA systems, including IEC-62443, NERC CIP, and the NIST Cybersecurity Framework. Industry and governmental efforts to build awareness of cyber risks have also been successful. Most industrial companies today appreciate the […]… Read More

The post Industrial Cybersecurity: Addressing Today’s and Tomorrow’s Challenges appeared first on The State of Security.

The post Industrial Cybersecurity: Addressing Today’s and Tomorrow’s Challenges appeared first on Security Boulevard.

Continue reading Industrial Cybersecurity: Addressing Today’s and Tomorrow’s Challenges→

Why OPSEC Is for Everyone, Not Just for People with Something to Hide

Posted on by

OPSEC (Operational Security) is a term derived from the U.S. military and is an analytical process used to deny an adversary information that could compromise the secrecy and/or the operational security of a mission. The very process of performing OPSEC or protecting your six from an adversary not only plays a very important role in […]… Read More

The post Why OPSEC Is for Everyone, Not Just for People with Something to Hide appeared first on The State of Security.

The post Why OPSEC Is for Everyone, Not Just for People with Something to Hide appeared first on Security Boulevard.

Continue reading Why OPSEC Is for Everyone, Not Just for People with Something to Hide→

‘KnockKnock’: New Attack on Office 365 Discovered

Posted on by

Microsoft’s Office 365 suite of cloud applications is now the most popular cloud service in the world by user count. While this has fast tracked Microsoft’s path to becoming a cloud-first enterprise software company, it has also put a bulls-eye on Office 365, making it a target of choice for hackers. Given the fact that […]… Read More

The post ‘KnockKnock’: New Attack on Office 365 Discovered appeared first on The State of Security.

The post ‘KnockKnock’: New Attack on Office 365 Discovered appeared first on Security Boulevard.

Continue reading ‘KnockKnock’: New Attack on Office 365 Discovered→

Clean IT Up: Cyber Hygiene Controls Tips

Posted on by

October is national cybersecurity awareness month, and with the recent hacks at Door Dash, the discovery of a large-scale iOS hacking campaign, and a database containing 419 million phone numbers associated with Facebook accounts, we’re all … Continue reading Clean IT Up: Cyber Hygiene Controls Tips→