Resources
Live Event
Nov
27

Secure integration of OT and IT networks

11:00 - 11:45am GMT
Michael Barford
Operational Technologies (OT) are central to almost every facet of our lives: CT machines, industrial robots, CNC milling machines and even washing machines. It encompasses anything that includes a computer chip and a program inside that is not traditionally “owned” by IT.However, operational technologies may use obsolete software that is vulnerable to threats because they have...
Infrastructure and Data Protection,
Data Protection,
Secure File Transfer
Free
45 Minutes
Live Event
Dec
03

Secure integration of OT and IT networks

11:00 - 11:45am AEDT
Michael Barford
Operational Technologies (OT) are central to almost every facet of our lives: CT machines, industrial robots, CNC milling machines and even washing machines. It encompasses anything that includes a computer chip and a program inside that is not traditionally “owned” by IT.However, operational technologies may use obsolete software that is vulnerable to threats because they have...
Infrastructure and Data Protection,
Data Protection,
Secure File Transfer
Free
45 Minutes
Live Event
Nov
21

Tackling the CIS: One Control at a Time

10:00 - 11:00am CST
Matthew Jerzewski
The Center for Internet Security (CIS) Critical Security Controls (CSC) are a trusted source of truth in the cybersecurity community. Many organizations implement the CIS CSC framework to ensure their cybersecurity programs are functioning at peak effectiveness. The latest iteration, CIS CSC v8.1, was released earlier this year. Join Matthew Jerzewski, Cybersecurity Researcher...
Monitoring
Free
1 hour
Live Webinar
Dec
03

GoAnywhere Customer Summit

7:00 - 8:00am PST
Join GoAnywhere’s leadership team for a packed hour covering:Preview of GoAnywhere 2025 releasesWhat’s new in GoAnywhere from the second half of this yearA look at Fortra Threat Brain (a multi-vector hub of verified threat intelligence)Answers to your most common GoAnywhere questions ...
Automation
FREE
1 hour
Live Webinar
Dec
12

Rethink How You Use Cloud File Sharing

8:00 - 8:45am PST
Scott Messick
The popularity of cloud-based file sharing services such as AWS, Dropbox, and OneDrive is undeniable. However, these user-friendly solutions come with some critical security drawbacks.Join Scott Messick, Lead Solutions Engineer, Fortra Dec. 12, as he discusses the pros and cons of cloud file sharing and introduce the advantages secure, managed file transfer (MFT) offers for...
Automation,
Threat Research & Intelligence
FREE
45 minutes
Blog

How to Proactively Harden Your Environment Against Compromised Credentials

Wed, 10/23/2024
How many user accounts do you have? Emails, social media, online shopping, streaming services—and that doesn’t even begin to account for professional logins. By the time you add them all up, it’s likely one hundred or more unique accounts.According to NordPass, the average user maintains an average of 168 logins for personal purposes, and no less than 87 for the workplace. This is an extraordinary...
Live Event
Nov
13

VMUG UserCon Nashville

9:00am - 3:30pm CST
Join us as we proudly sponsor the VMUG UserCon on November 13th! Swing by for a chat about MFT and see how we can help with your IT problems. Haven’t secured your spot yet? It’s free! ...
FREE
Dark Reading - featuring Tyler Reguly
News Article

Dark Reading: Novel Exploit Chain Enables Windows UAC Bypass

By Tyler Reguly on Thu, 10/10/2024
​​Fortra's security research team has identified a novel exploit chain, tracked as CVE-2024-6769, which allows attackers to bypass Windows User Access Control (UAC) and escalate privileges to gain full system control.
Infrastructure and Data Protection
IT Infrastructure Protection
Offensive Security
CSO Online - featuring Tyler Reguly
News Article

​​CSO: Microsoft privilege escalation issue forces the debate: ‘When is something a security hole?’​

By Tyler Reguly on Wed, 10/09/2024
​​CSO covered Fortra’s disclosure of a Microsoft privilege escalation issue that allows attackers to bypass UAC prompts. Fortra's Tyler Reguly explained that this bypass removes key security checks, posing a risk. Microsoft disagrees, calling it a convenience issue, but the debate continues.​
Threat Research & Intelligence
Infrastructure and Data Protection
IT Infrastructure Protection
Offensive Security
Live Event
Oct
24

VMUG UserCon Dallas-Fort Worth

9:00am - 4:30pm CDT
Join us as we proudly sponsor the VMUG UserCon on October 24th! Swing by for a chat about MFT and see how we can help with your IT problems. Haven’t secured your spot yet? It’s free! ...
FREE
Blog

CVE-2024-6769: Poisoning the Activation Cache to Elevate From Medium to High Integrity

By Ricardo Narvaja on Thu, 09/26/2024
This blog is about two chained bugs: Stage one is a DLL Hijacking bug caused by the remapping of ROOT drive and stage two is an Activation Cache Poisoning bug managed by the CSRSS server.The first stage was presented in detail at Ekoparty 2023 in the presentation called "I'm High" by Nicolás Economou from BlueFrost Security. He explained how to exploit the vulnerability which, at the time, had not...
Infrastructure and Data Protection
IT Infrastructure Protection
Offensive Security
Guide

Decoding the Attacker Mindset: Pen Testing Revelations

Cybersecurity isn't just about defense—it's about understanding the offense. With penetration testing, organizations can learn to think like an attacker and develop more proactive strategies that anticipate attacks. In this guide, explore 5 scenarios that provide insight into the methods and techniques deployed in real-world pen testing engagements, including: Using a password spray attack to...
Infrastructure and Data Protection
IT Infrastructure Protection
Offensive Security
Blog

Windows DWM Core Library Elevation of Privilege Vulnerability (CVE-2024-30051)

By Ricardo Narvaja on Mon, 09/09/2024
In this blog post, I will explain a vulnerability in the Microsoft Windows Desktop Windows Manager (DWM) Core library that I analyzed when the exploit for Core Impact was being developed. This vulnerability allows an unprivileged attacker to execute code as a DWM user with Integrity System privileges (CVE-2024-30051).Since there was not enough public information at the time to develop the exploit,...
Infrastructure and Data Protection
IT Infrastructure Protection
ITSecurityWire
News Article

How to Fortify Defenses Before Threats Materialize

By Chris Reffkin on Mon, 09/09/2024
Cyber threats are becoming more sophisticated and frequent, yet many organizations still face challenges due to limited resources. In ITSecurityWire, Fortra's Chris Reffkin highlights prioritizing remediation, closing the skills gap, and ongoing improvement.
IT Infrastructure Protection