Blog

Top Fraudulent Activity Targeting Retail on the Dark Web
Blog

Top Fraudulent Activity Targeting Retail on the Dark Web

Mon, 05/05/2025
Threat actors exploit the dark web to trade stolen data and illicit goods anonymously, often without the victim organization’s awareness. Malicious activity takes many forms across underground channels, but the technical barriers to accessing the dark web limit visibility — making it challenging to identify which assets may be exposed.If sensitive information is undetected on the dark web,...
What Is CUI Specified? Key Differences Explained
Blog

What Is CUI Specified? Key Differences Explained

Mon, 04/28/2025
CUI Specified is info needing protection or control under specific laws, regulations, or government-wide policies.
Compliance
Cybersecurity Maturity Model Certification (CMMC)
Controlled Unclassified Information (CUI)
Data Classification
What Is CUI Basic? Guidelines and Security Measures
Blog

What Is CUI Basic? Guidelines and Security Measures

Mon, 04/21/2025
Controlled Unclassified Information (CUI) is a sensitive data category that the United States federal government produces or interacts with.
Compliance
Cybersecurity Maturity Model Certification (CMMC)
Controlled Unclassified Information (CUI)
Data Classification
tax
Blog

Your Taxes Are Done but the Scammers Aren’t

By Meriam Senouci on Wed, 04/16/2025
This blog conducts a deep dive into a recent and widespread tax scam identified through Fortra’s threat research. It offers the reader a detailed analysis into the email lure and provides insights with predictions into how these scammers can continue targeting victims even after the tax deadline has passed.
Threat Research & Intelligence
RansomHouse
Blog

RansomHouse Ransomware: What You Need To Know

By Graham Cluley on Tue, 04/15/2025
What is RansomHouse?RansomHouse is a cybercrime operation that follows a Ransomware-as-a-Service (RaaS) business model, where affiliates (who do not require technical skills of their own) use the ransomware operator's infrastructure to extort money from victims. So they are a bog-standard ransomware gang?Not quite. Many ransomware operations encrypt and steal your data, demanding a ransom for a...
Vulnerability Research

Patch Tuesday Update - December 2024

By Mieng Lim on Wed, 04/09/2025
Fortra Vulnerability Management will include the Microsoft Patch Tuesday checks in the NIRV 4.56.0 and FVM Agent 2.17.Microsoft addressed 70 vulnerabilities this release, including 16 rated as Critical.CVE-2024-49138 - Microsoft has disclosed an actively exploited vulnerability that allows attackers to gain SYSTEM privileges on Windows devices. No further information is provided from Microsoft on...