Blog

Forescout is excited to announce that Alison King has joined the company as Vice President of Government Affairs. Alison has been at the forefront of change initiatives that positioned organizations in the Department of the Navy, Congress, the Cyberspace Solarium Commission and the Cybersecurity Infrastructure Security Agency (CISA) to achieve key objectives.  Her extensive experience […]

On October 3, 2022 the Cybersecurity and Infrastructure Security Agency (CISA) issued Binding Operational Directive 23-01 – Improving Asset Visibility and Vulnerability Detection on Federal Networks, a compulsory order intended to “make measurable progress toward enhancing visibility into agency assets and associated vulnerabilities.” BOD 23-01 mandates that Federal Civilian Executive Branch (FCEB) agencies complete a series […]

Forescout’s Vedere Labs latest research report is the first systematic study into deep lateral movement: how advanced adversaries can move laterally among devices at the controller level – also known as Purdue level 1 or L1 – of OT networks. Deep lateral movement lets attackers gain deep access to industrial control systems and cross often […]

As the new CEO of Forescout, I am honored and excited to join this team and partner with our board, our strong management team and employees as we take the company through its next phase of growth. Over the past several months I have been working with Wael, Greg and our Board to prepare and […]

In our new threat briefing report, Forescout’s Vedere Labs analyzes the Royal ransomware threat actor group and encryptor payload, presents threat hunt opportunities for network defenders and shares details of the group’s tactics, techniques, and procedures (TTPs). Who is Royal ransomware? The Royal ransomware threat actor group, initially tracked as DEV-0569, first emerged in early […]

With 70 international plants spanning 15 different countries, the AES Corporation is a next-generation energy company helping lead the way to a carbon-neutral future. Like many organizations, AES wanted to improve the security posture within their OT networks with technology spanning multiple vendors. Recently I sat down with Kyle Oetken, Director of Cyber Defense, and […]

On December 9, 2021, Apache upended the cybersecurity industry by publishing a zero-day vulnerability (CVE-2021-44228) for its ubiquitous Log4j logging utility. Dubbed Log4Shell, the remote code execution flaw (CVSS score:10) allows an attacker to take control of a connected device and run malicious code, access sensitive data or alter its configuration. Because Logj4 is free […]

Too much of our software, including critical software, is shipped with significant vulnerabilities that our adversaries exploit. This is a longstanding, well-known problem, but for too long we have kicked the can down the road. We need to use the purchasing power of the Federal Government to drive the market to build security into all […]

Project Memoria was the largest study about the security of TCP/IP stacks, conducted by Vedere Labs and partners in the cybersecurity industry. It started from a collaboration with JSOF to understand the impact of Ripple20 and led to the discovery of almost 100 vulnerabilities in 14 TCP/IP stacks, divided into five phases: AMNESIA:33, NUMBER:JACK, NAME:WRECK, […]