search
Search...
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Stack of documents with a cover titled REPORT CVE Disclosure on a tech-themed background.
BlogEngine.NET Directory Traversal + Remote Code execution
Data Security

A remote code execution (RCE) vulnerability, CVE-2019-10719, was discovered in BlogEngine 3.3.7 and earlier.

Graphic of a person climbing a blue spiral tower with the text What is HITRUST Compliance?
What is HITRUST Compliance?
HITRUST

What is HITRUST? HITRUST stands for the Health Information Trust Alliance. It was founded in 2007 and uses the “HITRUST approach” to help organizations from all sectors–but especially healthcare–effectively manage data, information risk, and compliance.

Three stacked report documents titled REPORT CVE Disclosure with digital circuit lines in the background.
Zyxel Devices Vulnerable to Cross-Site Scripting on Login page
Data Security

A reflected Cross Scripting vulnerability, CVE-2019-9955, was identified on several Zyxel devices, specifically on pages that use the mp_idx parameter.

Bookshelf with a plant and books including a 2019 PCI DSS Compliance guide by SecurityMetrics.
SecurityMetrics 2019 PCI Compliance Guide
PCI Trends

Compliance with any mandate takes time and planning. But, thousands of customers and readers use PCI Compliance Guide to make the PCI compliance process faster and simpler, as well as better maintain compliance.

Blue radar screen with gridlines, circular markers, and a sweeping line indicating detected signals.
What is Vulnerability Scanning?
Vulnerability Scanning

This blog explains how automated vulnerability scanning proactively identifies security weaknesses to meet PCI compliance and protect your network.

Blue stylized central processing unit with circuit lines connecting to four nearby components in digital illustration.
Data Breach Statistics from 2018 and Predictions for 2019
Forensics

Data Breach Statistics from 2018 and Predictions for 2019. How did our predictions from 2018 turn out and what you can do in 2019 to avoid a data breach.

Illustration of a key with white background.
What is a Managed Firewall and Do You Need One?
Data Security

What is a Managed Firewall and Do You Need One?

Multiple copies of a blue book titled SecurityMetrics Guide to HIPAA Compliance on a dark surface.
Guide to HIPAA Compliance Simplifies Data Security and Privacy
HIPAA Audit

We created our Guide to HIPAA compliance to help you close gaps in security and compliance, ultimately helping you avoid a data breach.

Megaphone with five icons on white background.
5 Tips to Implement Security Awareness at Your Company
Data Security

Whether you’re a CIO, the head of IT, or in a non-security-related position, if your data security practices are unclear, your company is at a greater risk to a data breach.

Pattern of multiple waving European Union flags with blue background and yellow stars.
GDPR Explained: FAQs and Best Practices
GDPR

The May 25th, 2018 deadline for GDPR has come and gone. So what is the state of GDPR compliance now?

Blue line fireworks bursts of varying sizes on a white background.
Close Security Gaps in 2019: 5 Blog Topics to Help You Avoid Data Breach
Forensics

We’ve rounded up some of the most helpful topics from our blog to help set you on the right course for 2019. Prepare now, so you’ll have less hassle later.

Illustration of hands typing on a keyboard connected to a monitor showing the word blog.
SecurityMetrics' Top Blogs of 2018
PCI Trends

These top SecurityMetrics blog posts help you understand and implement some of the most foundational data protection principles. Our goal it to help you close gaps in security and avoid a data breach in 2019.

Central building connecting to eight smaller shops arranged in a circle via lines.
What is Network Security?
Data Security

Network security consists of the policies, procedures, programs, hardware, software, and people you use to protect your corporate network.

Pattern of blue padlocks with one unlocked padlock crossed out by a red prohibition symbol.
New (And Old) Apache Struts Flaw: CVE-2016-1000031

Apache Struts developers released another security announcement on November 5, 2018

Illustration of blue mountains with a flag on top and a dotted path with location markers.
The Importance of Cybersecurity: SecurityMetrics' Free Academy
Compliance

The importance of cybersecurity: SecurityMetrics Academy is a free educational course designed for anyone who wants to learn about data security.

Smartphone with a chain and padlock icon on screen symbolizing security or locked device.
Securing Mobile Devices with Mobile Encryption
Data Security

How do you secure data on mobile devices? Physical security and mobile device policies are good at protecting the device itself, but another way to protect the data on the device is mobile encryption.

Computer screen with numbers on the left side going in the computer and dollar signs on the right side exiting computer.
How to Manage a Healthcare Data Breach
Forensics

Data breaches can be devastating. Here are 5 steps that will help you manage a healthcare data breach.

Illustration of blue flag with stars in a circle.
How Much does GDPR Compliance Cost?
GDPR

How much does GDPR compliance cost?

Blue outline icon of a crossed hammer and wrench on a light gray background.
Small Business Cybersecurity Tools
SMB

We have compiled these small business cybersecurity tools to help you maintain PCI compliance.

Illustration of a filing cabinet and icons with text reading HIPAA Privacy Rule Basics.
What is the HIPAA Privacy Rule?
HIPAA

The HIPAA Privacy Rule is crucial for protecting PHI and ensuring patient privacy. Learn about HIPAA PHI compliance with our free guide.

Security bulletin text with blue shield icons and one shield with a red prohibition circle.
Apache Struts Vulnerability: What You Should Do
Data Security

The Apache Struts project has just released a security bulletin about a new critical vulnerability in the Apache Struts web application framework. Here's how to protect yourself.

Cloud with padlock and chain protecting icons of credit card, medical clipboard, message, gear, and email.
Cloud Security: What Businesses Need to Know
Data Security

In this post, we’ll review an incident from last year to demonstrate the breadth of controls that should be established, as well as the difficult position in which any security event can place you.

Illustration comparing PCI as a zebra and GDPR as a plain horse with text 'PCI vs. GDPR What's the difference?'
PCI vs. GDPR: What’s the Difference?
GDPR

GDPR applies to any organization that processes or holds the personal data of persons residing in the European Union. PCI applies to organizations that handle credit cards from the major card brands.

Diagram showing network setup from internet to wireless router to PC, laptop, and wireless printer.
Network Diagrams: Key to Compliance and Security
Data Discovery

If you were to ask network architects and engineers about their favorite part of the job, I doubt any of them will respond with “creating and maintaining network diagrams.”