Blog
Exploiting Serial-to-Ethernet Converters in Critical Infrastructure
Forescout Vedere Labs uncovers 22 new vulnerabilities from two serial to Ethernet converter makers. See what was discovered and how to mitigate.
-
Caught in the act: Ransomware attack sticks to our AI-created honeypot
Here is the story of how we caught a ransomware attack in our research honeypot. Ransomware attacks on enterprise organizations lead the news. See Change Healthcare and Ascension. Attackers spend their time on the victim’s network, exfiltrate gigabytes of sensitive data, then lock victim’s systems — and ask for millions of dollars in ransom payment. […]
Read More -
Exposing the exploited: Analyzing vulnerabilities that live in the wild
It’s time to recognize official security vulnerability catalog systems aren’t enough. There are too many gaps in the named security vulnerability process. And plenty of vulnerabilities do not receive the attention they deserve. Some vendors silently patch issues while others leave vulnerabilities in a reserved state. There is not one source of information that contains […]
Read More -
Beyond Bullet Holes: Unveiling Cybersecurity’s Hidden Risk Exposures
The art of risk assessment has long been a crucial element of military strategy and decision-making – and it remains critical to today’s best practices in cybersecurity defense. Abraham Wald, a mathematical genius, played a pivotal role in revolutionizing the understanding of hidden risk and exposure with his innovative work on aircraft survivability. During World […]
Read More -
UK PSTI Act is a milestone for IoT security and passwords
Forescout examines the importance of the UK PSTI Act on IoT device security and the elimination of default password use in IoT products.
Read More -
The cyber threat landscape in Japan – risks, threats and mitigation guidance
In our recent research “Better Safe Than Sorry”, we reported how the number of exposed OT/ICS devices in Japan grew by 372% over the past six years. During this time, several notable cyber-attacks targeted businesses and government entities in Japan. The substantial increase in exposed OT/ICS combined with the recent cyber-attacks in Japan has prompted […]
Read More -
Why Chinese-made IoT devices are growing in the US despite bans
Chinese IoT devices grow in US despite government bans. Forescout researchers discuss the impact on OT security and critical infrastructure
Read More -
The global threat evolution of internet-exposed OT/ICS
Forescout Research Vedere Labs tracks the evolution of cybersecurity threats to operational technology and industrial control systems OT/ICS
Read More -
Connect:fun: New exploit campaign in the wild targets media company
In a new threat briefing, Forescout Research – Vedere Labs details an exploitation campaign targeting organizations running Fortinet’s FortiClient EMS which is vulnerable to CVE-2023-48788. We are designating this campaign Connect:fun because of the use of ScreenConnect and Powerfun as post-exploitation tools – our first-ever named campaign. Here are details of an incident targeting a […]
Read More -
“All your base are belong to us” – A probe into Chinese-connected devices in US networks
Update April 25, 2024: New Forescout Research video discusses why banned Chinese devices have grown rather than subside. What does a classic internet meme of a poor English translation of a 1990s video game (Zero Wing) have to do with the potential for state-sponsored cyber-attacks? In the game, a starship captain receives a transmission from […]
Read More