Blog
Exploiting Serial-to-Ethernet Converters in Critical Infrastructure
Forescout Vedere Labs uncovers 22 new vulnerabilities from two serial to Ethernet converter makers. See what was discovered and how to mitigate.
As part of Microsoft’s traditional Patch Tuesday in July, CVE-2020-1350 (codenamed “SIGRed”) was fixed and disclosed publicly. This vulnerability is very serious, with a CVSS score of 10, and allows remote unauthenticated attackers to run arbitrary code with elevated privileges. The Vulnerability The vulnerable component is the Windows DNS Server. Windows DNS clients and DNS […]
We are truly living in unprecedented times as we navigate through this global COVID-19 crisis. While this is especially true when it comes to our health and safety, it also applies to the cybersecurity teams that must protect a workforce that in many cases has shifted remote practically overnight. What’s more, cyberattacks against certain types […]
The modern enterprise is rapidly evolving from an on-prem network with a hard-shell security perimeter to a network of networks – and the diverse devices that form them. Are there devices that stand out as higher risk? If so, what is the business impact and how do we manage the risk? In this first edition […]
After we first reported on the EKANS ransomware back in February there have been three big new developments. First, a large hospital operator was hit by the malware and had its operations disrupted and patient data leaked online. Second, the malware forced a large automotive manufacturer to shut down some of its factories worldwide, as […]
We see IoT and connected devices all around us – there are billions of them, and they’re hard to miss. I speak all the time about the cybersecurity challenges these devices pose, and advocate for organizations to protect themselves. But sometimes the threat lies under the surface. The reality is that when you buy an […]
One thing that has stood out to me the most during this COVID-19 crisis is how, even in some of the most challenging of times, people are standing together to help each other out. One place I’ve seen that inside of Forescout is our Slack community, where hundreds of security leaders are working together to […]
Again and again, we’ve seen that the true heroes in this COVID-19 crisis are the healthcare workers and organizations on the front lines. But, who is ensuring that critical clinical work isn’t disrupted by a cyberattack? I sat down with Jonathan Langer, CEO of Medigate, to discuss how healthcare organizations are protecting their digital assets […]
Twitter: @MeetCyberBob Have you ever been driving along, pulled up to a stop light, and wondered why that stop light was put there in the first place? Or wondered about all other rules we follow on the road, like obeying yield signs or the single and double yellow lines on the road? Have you ever […]
By now I think we all understand the importance of knowing what devices are connected to your operational technology (OT) networks. After all, we’ve heard over and over from the experts that “you can’t protect what you can’t see“. And there is a foundational truth to this that we all probably agree with. As you […]