Blog

When South Central Power Company underwent a penetration test, they realized they had to make some changes. The company dove headfirst into implementing Zero Trust principles across their organization, including in both IT and operational technology (OT) environments. The result was a significant improvement to the organization’s cybersecurity posture across the entire extended enterprise. Those […]

Yesterday we learned that a cyberattack on February 5 impacted a water treatment plant in Oldsmar, Florida, which provides drinking water to nearly 15,000 residents. This is the most recent report of a significant breach targeting critical infrastructure and operational technology (OT) systems. The attack was thwarted in real-time by a very astute employee at […]

Forescout researchers have discovered vulnerabilities in multiple TCP/IP stacks in which ISNs (Initial Sequence Numbers within TCP connections) are improperly generated, leaving TCP connections of a device open to attacks. Forescout researchers analyzed 11 total stacks: uIP, FNET, picoTCP, Nut/Net, lwIP, cycloneTCP, uC/TCP-IP, MPLAB Net, TI-NDKTCPIP, Nanostack, and Nucleus NET. We found improperly generated ISNs […]

Securing any network begins with understanding every connected user and device and every bit of data they are trying to access. This is a basic premise of any security framework—including Zero Trust. Clearly, you need to know who is trying to access what before you can create appropriate enforcement policies and controls. But what happens […]

Updates:January 26, 2021: Forescout has found no evidence of compromise by SuperNova or Raindrop January 6, 2021: Forescout re-enables additional product downloads following thorough precautionary security review December 24, 2020: Forescout re-enables product downloads following thorough precautionary security review December 22, 2020: Updates available for Forescout eyeSight and eyeInspect to detect vulnerable software versions and SUNBURST malware. Additional mitigation best practices leveraging eyeSegment. […]

The Ministério Publico do Estado da Bahia (MPBA) is a key organization in Brazil, responsible for the defense of legal order, the democratic regime and social and individual interests in the State of Bahia. A key piece of executing those services for the state’s more than 13 million citizens is the organization’s technology, which includes […]

In 2020, we saw the healthcare industry change immensely under the pressure of COVID-19. Not only did hospitals have to adapt overnight to increased patient loads, but researchers also raced for a cure and manufacturers readied production lines. But when we look beyond the pandemic that dominated much of 2020, there is more change taking […]

On December 8th, Forescout Research Labs publicly disclosed the AMNESIA:33 set of vulnerabilities, affecting four open-source TCP/IP stacks. The response from the community has been overwhelming. Upon identifying more than 150 component and device vendors that could be using the affected stacks, we knew that these bugs have far-reaching implications. However, we did not expect […]

In August, Forescout announced the launch of Forescout eyeInspect 4.2 (formerly SilentDefense™), setting a new standard for visibility and threat detection for operational technology (OT) networks on the market today. In this blog, we expand on the new features and functionality in this release that help asset owners and network administrators identify and analyze security […]