Blog

Along with many of my colleagues and Healthcare industry peers, I have been energized recently, as COVID cases ease and optimism takes root. After a six-month professional hiatus, I decided back in November 2020 to join Forescout and progress my longstanding mission to support Healthcare delivery organizations (HDOs). Joining Forescout has been a transformative move […]

“By 2025, 75% of OT security solutions will be interoperable with IT security solutions and delivered via multifunction platforms.” This statement by Gartner validates that the IT-OT convergence trend is in full swing. It also reinforces the need for IT security teams to partner with OT operators across the enterprise to ensure cyber and operational […]

On March 9th, the world woke up to the news of yet another large-scale security breach. A group of hackers got access to and control of thousands of security cameras developed and managed by Verkada, a Silicon Valley-based company that sells security as a service. They provide their customers with hardware (their IP cameras) that […]

2020 showed that organizations everywhere are under attack more than ever before. The first half of the year alone saw more attacks than all of 2019 combined – and there is no sign that will slow down in 2021.  With trends like work from anywhere, supply chain vulnerabilities and billions of newly connected IoT and […]

Let’s say you’re committed to implementing Zero Trust architecture. Where should you begin? It’s a daunting task, but it’s not as if you have to blaze a new trail. In fact, the trail has been paved by legions of security and IT professionals who have already succeeded in getting from point A (porous, “hope-for-the-best” security […]

When South Central Power Company underwent a penetration test, they realized they had to make some changes. The company dove headfirst into implementing Zero Trust principles across their organization, including in both IT and operational technology (OT) environments. The result was a significant improvement to the organization’s cybersecurity posture across the entire extended enterprise. Those […]

Yesterday we learned that a cyberattack on February 5 impacted a water treatment plant in Oldsmar, Florida, which provides drinking water to nearly 15,000 residents. This is the most recent report of a significant breach targeting critical infrastructure and operational technology (OT) systems. The attack was thwarted in real-time by a very astute employee at […]

Forescout researchers have discovered vulnerabilities in multiple TCP/IP stacks in which ISNs (Initial Sequence Numbers within TCP connections) are improperly generated, leaving TCP connections of a device open to attacks. Forescout researchers analyzed 11 total stacks: uIP, FNET, picoTCP, Nut/Net, lwIP, cycloneTCP, uC/TCP-IP, MPLAB Net, TI-NDKTCPIP, Nanostack, and Nucleus NET. We found improperly generated ISNs […]

Securing any network begins with understanding every connected user and device and every bit of data they are trying to access. This is a basic premise of any security framework—including Zero Trust. Clearly, you need to know who is trying to access what before you can create appropriate enforcement policies and controls. But what happens […]