Live Event
10:00 - 11:00am CST
Matthew Jerzewski
Blog
Lean into Security: Take the Next Step toward Securing Your Organization
By Antonio Sanchez on Mon, 10/28/2024
Elevating your organization’s security maturity level requires a forward-leaning approach to cybersecurity leadership. This article discusses key security fundamentals, advanced strategies, and steps to assess and build a robust security maturity model that supports business goals.
Blog
Fortra Pledges to be Secure by Design
By Anthony Israel-Davis on Mon, 10/28/2024
Fortra recently signed CISA’s Secure by Design Pledge. Learn what this means to our customers regarding our approach to software development.
Live Webinar
8:00 - 8:45am PST
Scott Messick
Blog
How to Proactively Harden Your Environment Against Compromised Credentials
Wed, 10/23/2024
How many user accounts do you have? Emails, social media, online shopping, streaming services—and that doesn’t even begin to account for professional logins. By the time you add them all up, it’s likely one hundred or more unique accounts.According to NordPass, the average user maintains an average of 168 logins for personal purposes, and no less than 87 for the workplace. This is an extraordinary...
News Article
October Patch Tuesday roundup: One Windows hole has a score of 9.8
By Tyler Reguly on Tue, 10/22/2024
Tyler Reguly, Associate Director of Security R&D at Fortra, was featured in Howard’s Substack article covering October’s Patch Tuesday updates.
News Article
Forbes: Update Now As Critical Windows 9.8/10 Vulnerability Confirmed
By Tyler Reguly on Thu, 10/17/2024
In a recent Forbes article, Tyler Reguly, Associate Director of Security R&D at Fortra, highlights the importance of addressing CVE-2024-43468, a critical vulnerability rated 9.8/10.
Blog
Why We Can’t Take Supply Chain Attacks Seriously Enough
By Theo Zafirakos on Wed, 10/16/2024
Research suggests that 98% of organizations are currently doing business with a third party that’s been breached. Learn about the main types of supply chain attacks today and the simplest steps to stay safe.
News Article
National Cybersecurity Awareness Month 2024: Industry Experts Share Their Thoughts
By Antonio Sanchez on Wed, 10/16/2024
For National Cybersecurity Awareness Month 2024, Antonio Sanchez, Principal Cybersecurity Evangelist at Fortra, contributed expert tips to VM Blog’s latest collection.
Live Event
All day
Bob Erdman |
Chris Reffkin |
John Wilson |
Theo Zafirakos
On-Demand Webinar
[WEBINAR] Bearing the Load: Managing Supply Chain Risk
By Josh Davies
Session DetailsThe risk you carry as an enterprise is no longer entirely in your control. Or is it?Join Fortra as we discuss one of the hottest topics in cybersecurity today: third-party risk. Partnering with outside organizations can be an instant liability, but in today’s vastly interconnected business economy, it's a necessary evil. Lengthened supply chains facilitate faster and cheaper...
News Article
Computer Weekly: Five Zero-Days to Be Fixed on October Patch Tuesday
By Tyler Reguly on Tue, 10/15/2024
Fortra’s Tyler Reguly is quoted in a recent Computer Weekly article, discussing the highlights of October’s Patch Tuesday.
News Article
Dark Reading: Novel Exploit Chain Enables Windows UAC Bypass
By Tyler Reguly on Thu, 10/10/2024
Fortra's security research team has identified a novel exploit chain, tracked as CVE-2024-6769, which allows attackers to bypass Windows User Access Control (UAC) and escalate privileges to gain full system control.
News Article
Global Security Mag: Microsoft Vulnerability CVE-2024-6769 Now Public on Fortra.com
Wed, 10/09/2024
Fortra researchers are urging organizations to be vigilant about potential risks associated with a vulnerability affecting Microsoft systems.
News Article
CSO: Microsoft privilege escalation issue forces the debate: ‘When is something a security hole?’
By Tyler Reguly on Wed, 10/09/2024
CSO covered Fortra’s disclosure of a Microsoft privilege escalation issue that allows attackers to bypass UAC prompts. Fortra's Tyler Reguly explained that this bypass removes key security checks, posing a risk. Microsoft disagrees, calling it a convenience issue, but the debate continues.
News Article
CyberTech Insights: The Cybersecurity Gap: Why Even the Best-Trained Teams Still Vulnerable to Attacks
By John Grancarich on Mon, 10/07/2024
In a new article for CyberTech Insights, John Grancarich, Fortra's Chief Strategy Officer, explores why security awareness training matters more than ever. Drawing from personal experiences with cyber extortion and phishing, John highlights how continuous practice can better prepare us for real-world risks.Originally published in CyberTech Insights.Excerpt:“We’re not going to get any less busy, so...
Blog
Fortra Insights: Customer Cybersecurity Challenges and Plans for 2025
By Lisa Lombardo on Thu, 10/03/2024
Fortra’s cybersecurity experts share insights into their customers’ top concerns and strategies for 2025. This article uncovers how businesses prepare to navigate the evolving cybersecurity landscape, from static budgets to compliance pressures and modern threats.
Blog
Election Integrity at Risk: Safeguarding 2024’s Global Polls from Cyber Attacks
By Antonio Sanchez on Tue, 10/01/2024
As the world prepares for the 2024 election cycle, cybersecurity, disinformation, and AI-driven manipulation are emerging as major threats to democratic processes. From deepfakes to foreign influence campaigns, the risks to election integrity are growing. Individuals, businesses, and governments must unite to protect global elections from these evolving challenges.
Blog
Are Younger Generations Losing Faith in Cybersecurity? The Oh, Behave! Report Investigates
By Antonio Sanchez on Fri, 09/27/2024
Times have changed since the happy-go-lucky internet days of the dot-com boom. Find out just how much, what that means, and what cybersecurity practitioners can do about it.
Blog
CVE-2024-6769: Poisoning the Activation Cache to Elevate From Medium to High Integrity
By Ricardo Narvaja on Thu, 09/26/2024
This blog is about two chained bugs: Stage one is a DLL Hijacking bug caused by the remapping of ROOT drive and stage two is an Activation Cache Poisoning bug managed by the CSRSS server.The first stage was presented in detail at Ekoparty 2023 in the presentation called "I'm High" by Nicolás Economou from BlueFrost Security. He explained how to exploit the vulnerability which, at the time, had not...