2014

Background The BlueKeep vulnerability was first reported by the UK’s National Cyber Security Centre (NCSC) and acknowledged by Microsoft on May 14, 2019. To be successful, the exploit must occur before authentication; however, no user interaction is required for remote attackers to execute arbitrary code on the target system. If successful, attackers can alter or […]

The Forescout Cyber Roundup is a weekly blog series that highlights some of the major cyber headlines, as well as some of the more obscure stories from the week. The purpose of this curation is to raise cyber awareness, provoke thought and encourage discussion among cyber professionals at all levels. Articles are categorized by industry, […]

Twitter: @MeetCyberBob IoT security faces many challenges stemming from vulnerabilities present in many operating systems, including widely-used Windows releases. Without taking the time to regularly update and patch our devices, businesses face a myriad of IoT security threats. The Common Vulnerabilities and Exposures database, more commonly known as CVE, lists 775 vulnerabilities for Windows 10. […]

Utility operators in the United States and Canada must keep pace with the evolving and stringent regulatory requirements of the North American Electric Reliability Corporation’s (NERC) Critical Infrastructure Protection (CIP) standards. Maintaining compliance with NERC CIP has now become even more crucial as standards become stricter and fines more costly, as evidenced by the $10 […]

The 2019 SANS State of OT/ICS Cybersecurity Survey explores the challenges involved with designing, operating, and managing risk to industrial control systems (ICS) and their cyber assets. Security professionals active in IT, OT and hybrid IT-OT domains from around the world took part in the survey to answer the questions about known and perceived cybersecurity […]

The Forescout Cyber Roundup is a weekly blog series that highlights some of the major cyber headlines, as well as some of the more obscure stories from the week. The purpose of this curation is to raise cyber awareness, provoke thought and encourage discussion among cyber professionals at all levels. Articles are categorized by industry, […]

Twitter: @MeetCyberBob Infosecurity Europe 2019, otherwise known as Infosec, starts this week. In preparing with our team here at Forescout, I’ve been looking at the program of events. More than ever it looks like speakers are going to talk about how to mitigate business problems to the technologists that will be attending. This is really […]

The Forescout Cyber Roundup is a weekly blog series that highlights some of the major cyber headlines, as well as some of the more obscure stories from the week. The purpose of this curation is to raise cyber awareness, provoke thought and encourage discussion among cyber professionals at all levels. Articles are categorized by industry, […]

Another Windows vulnerability has emerged onto the scene affecting an estimated 1 million devices, subsequently placing the industrial operations and critical services of millions at risk of disruption. Of even more concern is that this vulnerability is “wormable”, meaning any future malware using this exploit would quickly spread through all infected devices 1. Microsoft announced […]