Resources
Guide

Decoding the Attacker Mindset: Pen Testing Revelations

Cybersecurity isn't just about defense—it's about understanding the offense. With penetration testing, organizations can learn to think like an attacker and develop more proactive strategies that anticipate attacks. In this guide, explore 5 scenarios that provide insight into the methods and techniques deployed in real-world pen testing engagements, including: Using a password spray attack to...
Infrastructure and Data Protection
IT Infrastructure Protection
Offensive Security
Blog

Windows DWM Core Library Elevation of Privilege Vulnerability (CVE-2024-30051)

By Ricardo Narvaja on Mon, 09/09/2024
In this blog post, I will explain a vulnerability in the Microsoft Windows Desktop Windows Manager (DWM) Core library that I analyzed when the exploit for Core Impact was being developed. This vulnerability allows an unprivileged attacker to execute code as a DWM user with Integrity System privileges (CVE-2024-30051).Since there was not enough public information at the time to develop the exploit,...
Infrastructure and Data Protection
IT Infrastructure Protection
Patch Tuesday
Blog

Patch Tuesday Update August 2024

By Tyler Reguly on Thu, 08/15/2024
The three CVSS 9.8 vulnerabilities included in this month’s patch drop are likely to be the first thing that catches anyone’s attention this month. All three are remote, unauthenticated code execution, the very type of vulnerability where we previously would have used the word, “wormable.”
IT Infrastructure Protection
Guide

Guide to Creating a Proactive Cybersecurity Strategy

Cyber attacks are common, with 89% of companies experiencing an attack in the last 12 months*. It’s time to stop asking if attacks will occur and start asking if you can stop attacks from being successful. One of the best ways to answer this question is by employing a proactive security program. Using assessment and testing to harden your cybersecurity measures, proactive security: Uncovers...
Infrastructure and Data Protection
IT Infrastructure Protection
Guide

How to Use Upskilling and Reskilling to Scale Your Cybersecurity Team

The cybersecurity skills shortage is not just an ongoing inconvenience—it is a serious vulnerability that can be exploited by attackers. But how can organizations go about patching this gap while the talent gap endures? The answer lies in leveraging the resources you already have on hand: your existing workforce. How do you transform your existing personnel to meet today’s cybersecurity demands?...
Infrastructure and Data Protection
Fortra Webinar
On-Demand Webinar

Elevating Cloud Security: MFT Best Practices & Insights

Wed, 05/22/2024
Whether your files are located in the public cloud, private cloud, or within a hybrid environment, managing file transfers securely is essential for businesses today. GoAnywhere Managed File Transfer (MFT) solution provides the security and control needed to move data confidently between systems, locations, users, and trading partners.In this webinar, we will delve into the design and architecture...
Infrastructure and Data Protection
Data Protection
Secure File Transfer
On-Demand Webinar

How Fortra Enables Your Zero Trust Strategy

By Nick Hogg
The concept of using a Zero Trust architecture in cybersecurity has been around for more than a decade, and its fundamental principle of “never trust, always verify” sounds straightforward enough. However, there’s a lot of noise around Zero Trust, often generated by vendors promising that their solution is that magic silver bullet to all of your Zero Trust problems. This can muddy the waters and...
Infrastructure and Data Protection
Gone Phishing Report
Guide

2023 Gone Phishing Tournament Report

Working with Microsoft to create a real-world simulation experience, this report provides a true phishing behavior benchmarking opportunity for organizations worldwide.
Infrastructure and Data Protection
Data Protection
Anti-Phishing
On-Demand Webinar

Bringing Security to the Cloud

Mon, 01/22/2024
Learn key strategies and elements for effective cloud security in this Alert Logic webinar with Nicholas Laing, Solutions Engineer at Fortra. In this webinar, we cover: Challenges of cloud security Drivers for cloud adoption Critical questions for cloud strategy Cloud adoption phases Security considerations Architectural approaches Security responsibilities and cloud frameworks Key cloud...
Infrastructure and Data Protection
On-Demand Webinar

Boost Your Cloud Security with MFT

By Ray Sutton
Whether your files reside in the public cloud, private cloud, or within a hybrid environment, GoAnywhere Managed File Transfer (MFT) delivers the security and control you need to move data confidently between systems, locations, users, and trading partners. In this video, Ray Sutton, Solutions Engineer, and Tim Shaw, Solutions Engineer, Fortra, will provide a high-level look at GoAnywhere MFT’s...
Infrastructure and Data Protection
Data Protection
Secure File Transfer
On-Demand Webinar

How to Transfer Data Securely When Moving to The Cloud

By Ray Sutton
As more and more businesses move to a multi-cloud strategy, transferring data between cloud platforms has become a crucial aspect of the migration process, and due to the numbers of platforms and interfaces companies work with today, security, auditing, and maintainability of data transfers is growing ever more difficult.As a result of all the added complexity, operational expenses and security...
Infrastructure and Data Protection
Data Protection
Secure File Transfer
Guide

6 Cybersecurity Thought Leaders on Data Protection

Data protection is essential for the health and survival of any organization. Getting the support of corporate leadership is critical to fully protect your valuable assets. In this eBook, six experts share their perspectives of:The current challenges surrounding data protectionWhat the future of data protection may look likeWays to gain support within an organization for your data protection...
Infrastructure and Data Protection
Data Protection