2014

The COVID-19 pandemic forced a hurried shift to remote work in 2020 and organizations had to prioritize employee productivity and remote access. While home and public networks, along with cloud-based applications kept everyone working, they also introduced a hidden threat. As lockdown restrictions lift and offices prepare to reopen, we must now address the risk […]

Quickly and accurately ensure effective segmentation through traffic visualization The recent Colonial Pipeline cybersecurity incident and subsequent pipeline shutdown highlights the need to limit the blast radius of incidents affecting critical infrastructure. Last year a similar but less-publicized incident occurred when an attacker gained access to a natural gas compression facility’s IT network and then […]

Network segmentation is a primary risk mitigating strategy against current cyber security threats, namely ransomware. However, enterprise-wide adoption within healthcare delivery organizations (HDOs) has been low. Why? There’s a perception that segmentation is too complex, requires specialized implementation skills and might add risks of disruption to clinical care. More pointed, when you don’t have an […]

Cybersecurity is not a partisan issue; it is a national security issue. While previous administrations have issued cybersecurity-related executive orders with clear calls-to-action for federal agencies to follow, this executive order is significant given the recent cybersecurity incidents. From SolarWinds to Colonial Pipeline, the increasing volume of cyber attacks has shown how incidents can significantly […]

Securing critical infrastructure has been a growing concern for many years as major breaches spanning a wide range of industrial sectors consistently make headlines. The latest being the recent attack on Colonial Pipeline from a cyber-criminal group named Darkside, which came only days after the U.S. Department of Energy (DOE) announced a 100-day Plan to […]

Forescout Research Labs found and disclosed several critical vulnerabilities on TCP/IP stacks that affect hundreds of millions of IT, OT, IoT and IoMT devices: AMNESIA:33, NUMBER:JACK and NAME:WRECK. This research – collectively called Project Memoria – has the mission to uncover threats arising from this new class of vulnerabilities and to support the community in […]

On April 20, 2021 the U.S. Department of Energy (DOE) announced a 100-day plan to safeguard critical infrastructure from persistent and sophisticated threats. Working with the U.S. Department of Homeland Security’s (DHS) Cybersecurity and Infrastructure Security Agency (CISA), this initiative ultimately aims to establish a collective defense framework where security and threat data can be […]

Today, Forescout Research Labs, partnering with JSOF Research, disclose NAME:WRECK, a set of nine vulnerabilities affecting four popular TCP/IP stacks (FreeBSD, Nucleus NET, IPnet and NetX). These vulnerabilities relate to Domain Name System (DNS) implementations, causing either Denial of Service (DoS) or Remote Code Execution (RCE), allowing attackers to take target devices offline or to […]

Forgive me for stating the obvious, but IT-OT/ICS environments are incredibly complex. SOC teams need better tools that provide contextual information about connected devices and network operations in a coherent, quickly digestible way. Splunk started the ball rolling in August 2020 with its OT Security Add-on release, expanding the Splunk Enterprise Security platform’s ability to […]