Blog

Forescout Research Labs found and disclosed several critical vulnerabilities on TCP/IP stacks that affect hundreds of millions of IT, OT, IoT and IoMT devices: AMNESIA:33, NUMBER:JACK and NAME:WRECK. This research – collectively called Project Memoria – has the mission to uncover threats arising from this new class of vulnerabilities and to support the community in […]

On April 20, 2021 the U.S. Department of Energy (DOE) announced a 100-day plan to safeguard critical infrastructure from persistent and sophisticated threats. Working with the U.S. Department of Homeland Security’s (DHS) Cybersecurity and Infrastructure Security Agency (CISA), this initiative ultimately aims to establish a collective defense framework where security and threat data can be […]

Today, Forescout Research Labs, partnering with JSOF Research, disclose NAME:WRECK, a set of nine vulnerabilities affecting four popular TCP/IP stacks (FreeBSD, Nucleus NET, IPnet and NetX). These vulnerabilities relate to Domain Name System (DNS) implementations, causing either Denial of Service (DoS) or Remote Code Execution (RCE), allowing attackers to take target devices offline or to […]

Forgive me for stating the obvious, but IT-OT/ICS environments are incredibly complex. SOC teams need better tools that provide contextual information about connected devices and network operations in a coherent, quickly digestible way. Splunk started the ball rolling in August 2020 with its OT Security Add-on release, expanding the Splunk Enterprise Security platform’s ability to […]

Along with many of my colleagues and Healthcare industry peers, I have been energized recently, as COVID cases ease and optimism takes root. After a six-month professional hiatus, I decided back in November 2020 to join Forescout and progress my longstanding mission to support Healthcare delivery organizations (HDOs). Joining Forescout has been a transformative move […]

“By 2025, 75% of OT security solutions will be interoperable with IT security solutions and delivered via multifunction platforms.” This statement by Gartner validates that the IT-OT convergence trend is in full swing. It also reinforces the need for IT security teams to partner with OT operators across the enterprise to ensure cyber and operational […]

On March 9th, the world woke up to the news of yet another large-scale security breach. A group of hackers got access to and control of thousands of security cameras developed and managed by Verkada, a Silicon Valley-based company that sells security as a service. They provide their customers with hardware (their IP cameras) that […]

2020 showed that organizations everywhere are under attack more than ever before. The first half of the year alone saw more attacks than all of 2019 combined – and there is no sign that will slow down in 2021.  With trends like work from anywhere, supply chain vulnerabilities and billions of newly connected IoT and […]

Let’s say you’re committed to implementing Zero Trust architecture. Where should you begin? It’s a daunting task, but it’s not as if you have to blaze a new trail. In fact, the trail has been paved by legions of security and IT professionals who have already succeeded in getting from point A (porous, “hope-for-the-best” security […]