Resources

Guide

The Ultimate Guide to DORA Compliance for the Financial Sector

The Digital Operational Resilience Act (DORA) applies to over 22,000 financial entities and ICT providers in the EU. It introduces an end-to-end framework for effective risk managements, ICT and cyber security operational capabilities, and third-party management to assure the consistent delivery of services along the financial value chain. This comprehensive guide covers everything you need to...
Guide

PCI DSS 4.0 Compliance: Tips to Avoid Last-Minute Panic

The impending Payment Card Industry Data Security Standard (PCI DSS) 4.0 requirements were created to curtail rampant fraud and the billions in losses victims incur. That said, retooling your operations to meet ever-evolving compliance standards isn’t easy. This guide gives you a detailed look at PCI DSS 4.0 changes and how you can achieve compliance with the updated requirements. Having a...
Guide

Understanding the White House’s 2023 National Cybersecurity Strategy

The Biden Administration’s bold 2023 National Cybersecurity Strategy forms a roadmap for public and private security efforts. There’s a lot of valuable content in this plan, which will take organizations time to understand and apply to their operations. Fast-track your knowledge with this eBook, which distills the five critical pillars and their ramifications. Discover how to: Protect critical...
Blog

Key Insights for Zero Trust in 2023

With the release of the 2023 Zero Trust Security Report, it’s a good time to reflect on the seismic shifts that have happened in the industry regarding network security. Discover key insights and impacts of Zero Trust in 2023.
Blog

The Advantages of Cybersecurity Vendor Consolidation

First there was the boom – now there’s the bust. Organizations that invested in myriad new solutions to handle the complexity of myriad security problems now have a different problem on their hands – how do you handle all of the vendors? Companies are finding there’s a different kind of noise when too many providers are in the mix, and they’re looking to cut back. They still need the effectiveness...
Blog

Security Awareness: The Groundwork of Cybersecurity Culture

It’s a big world out there, and cybercriminals know you don’t have time for everything. A common fallacy is that they’re lurking in dark basements, bending their brands to maximum capacity to create highly sophisticated exploits that blow any current security system out of the water. More often than not, they’re not. Criminal hackers go after the low hanging fruit and try the easy road before...
Blog

What Is a Cloud Access Security Broker (CASB)?

The proliferation of cloud computing has heightened the need for organizations to monitor and manage the safe use of cloud services. Cloud access security brokers, or CASBs, provide the necessary security features to protect cloud-based resources as they’re accessed while also detecting threats and controlling data that flows through the cloud. What Are the 4 Pillars of Cloud Access Security...
Blog

How to Automate Login to a Website and Download a File

If you're a developer, scripting automations like webpage logins and file downloads can be fun. But most business users don't have the time or skill for such an undertaking. Learn how robotic process automation (RPA) offers an alternative to scripting and makes it easy to automate login to a website and download a file.
Blog

Exploring the 2023 Penetration Testing Report: 5 Key Findings

Each year the threat landscape continues to evolve, and security measures must evolve with it. Recently released, Fortra’s 2023 Penetration Testing Report offers a view into the usage and perception of pen testing, with the intent to determine how these services must adapt in the future. Explore a few salient points in this edition that betrayed changes in the penetration testing landscape.
Blog

A Day in the Life of a SOC Team

Managed detection and response (MDR) would be nothing without a SOC (security operations center). These are the people who make Alert Logic's MDR services so dependable. It’s time you met them.
Blog

An IBM i Hacking Tale

Discover how penetration testing can be used on IBM i systems to find hidden vulnerabilities in your security. This post breaks down Core Impact's IBM i pen testing process from discovery to privilege escalation.
Blog

Stopping Cybercriminals From Abusing Security Tools

Microsoft’s Digital Crimes Unit (DCU) , cybersecurity software company Fortra ™ and Health Information Sharing and Analysis Center ( Health-ISAC ) are taking technical and legal action to disrupt cracked, legacy copies of Cobalt Strike and abused Microsoft software, which have been used by cybercriminals to distribute malware, including ransomware. This is a change in the way DCU has worked in the...
Blog

3 Tips to Strengthen AWS Container Security

Containers are fundamental to swift, reliable AWS deployment. So, how can you strengthen AWS container security?
Guide

Fortra's Complete Guide to Layered Offensive Security

Most organizations have a decent understanding of the types of defensive security tactics they need to employ to thwart cyberattacks. But offensive security techniques are just as important for detecting existing vulnerabilities that a threat actor has yet to discover and exploit. Learn how to approach offensive security from the ground up, including the value of using a layered security approach...