Blog

Forescout Research Labs, with support from Medigate Labs, have discovered a set of 13 new vulnerabilities affecting the Nucleus TCP/IP stack, which we are collectively calling NUCLEUS:13. The new vulnerabilities allow for remote code execution, denial of service, and information leak. Nucleus is used in safety-critical devices, such as anesthesia machines, patient monitors and others […]

“Forescout’s eyeInspect product has the broadest ICS protocol support of the vendors evaluated. That protocol knowledge also helps Forescout deploy the leading asset discovery and identification capability in this evaluation according to multiple customers.” Forescout is proud to be recognised by Forrester in its inaugural Industrial Control Systems (ICS) Security Solutions Wave, 2021. The ability […]

Ways to unstick, stuck segmentation projects Today, information has surpassed oil as the foremost economic driver in the world. Attempts to steal valuable data have risen dramatically in recent years and will only continue to increase. In response, network segmentation has become a valuable tool to protect data and limit the blast radius of any […]

Rizal Commercial Banking Corporation (RCBC) begun as a small development bank in the Philippines and has grown to encompass a wide range of financial services and branches in the U.S., Europe, Australia and New Zealand. Like any financial institution, it must comply with a host of regulations and is a prime target for malicious actors. […]

We are thrilled to announce Forescout has been named the winner of the “Overall IoT Security Solution Provider of the Year” award in the fifth annual CyberSecurity Breakthrough Awards. The awards program is conducted by CyberSecurity Breakthrough, a leading independent market intelligence organization, and aims to honor excellence and recognize innovation, hard work and success […]

Network segmentation has become a valuable tool to protect data and manage the attack surface during any cybersecurity incidents. It’s also a critical component of Zero Trust programs and organizations’ ability to maintain compliance amid numerous regulations being introduced by governments and industry bodies. Yet, enterprises should not hesitate when it comes to implementing network […]

On August 10, the Office of Management and Budget (OMB) released guidance to civilian agencies on how to implement the goals of the May 12 Executive Order on Improving the Nation’s Cybersecurity with regard to software that is considered “critical.” Agencies have just 60 days to identify “critical software” and 1 year to implement enhanced […]

Forescout Research Labs and JFrog Security Research have discovered a set of 14 new vulnerabilities affecting the NicheStack TCP/IP stack, which we are collectively calling INFRA:HALT. The new vulnerabilities allow for remote code execution, denial of service, information leak, TCP spoofing, or DNS cache poisoning. NicheStack is used in Operational Technology (OT) devices commonly found in several critical […]

On July 2, news emerged of a large-scale attack leveraging the Kaseya VSA network monitoring and management solution to deploy a variant of the REvil ransomware. The attackers claimed that more than a million devices had been infected and they demanded $70 million in Bitcoin to publish a tool to decrypt the files of all […]