Blog
Exploiting Serial-to-Ethernet Converters in Critical Infrastructure
Forescout Vedere Labs uncovers 22 new vulnerabilities from two serial to Ethernet converter makers. See what was discovered and how to mitigate.
Updates:January 26, 2021: Forescout has found no evidence of compromise by SuperNova or Raindrop January 6, 2021: Forescout re-enables additional product downloads following thorough precautionary security review December 24, 2020: Forescout re-enables product downloads following thorough precautionary security review December 22, 2020: Updates available for Forescout eyeSight and eyeInspect to detect vulnerable software versions and SUNBURST malware. Additional mitigation best practices leveraging eyeSegment. […]
The Ministério Publico do Estado da Bahia (MPBA) is a key organization in Brazil, responsible for the defense of legal order, the democratic regime and social and individual interests in the State of Bahia. A key piece of executing those services for the state’s more than 13 million citizens is the organization’s technology, which includes […]
In 2020, we saw the healthcare industry change immensely under the pressure of COVID-19. Not only did hospitals have to adapt overnight to increased patient loads, but researchers also raced for a cure and manufacturers readied production lines. But when we look beyond the pandemic that dominated much of 2020, there is more change taking […]
On December 8th, Forescout Research Labs publicly disclosed the AMNESIA:33 set of vulnerabilities, affecting four open-source TCP/IP stacks. The response from the community has been overwhelming. Upon identifying more than 150 component and device vendors that could be using the affected stacks, we knew that these bugs have far-reaching implications. However, we did not expect […]
In August, Forescout announced the launch of Forescout eyeInspect 4.2 (formerly SilentDefense™), setting a new standard for visibility and threat detection for operational technology (OT) networks on the market today. In this blog, we expand on the new features and functionality in this release that help asset owners and network administrators identify and analyze security […]
What Is AMNESIA:33? AMNESIA:33 is a set of 33 vulnerabilities impacting four open source TCP/IP stacks (uIP, PicoTCP, FNET, and Nut/Net), which collectively serve as the foundational connectivity components of millions of devices around the world. The details of these vulnerabilities are described in our technical report and will be presented at Black Hat Europe […]
Over the last several years, we’ve seen an escalation in attacks leveraging connected devices. The world is just beginning to understand, though, that traditional IT devices represent only the tip of the iceberg when it comes to cyber risk. The proliferation of agentless IoT, OT and other connected devices will create a potentially far greater […]
Jump on a bus, bicycle, taxicab, or other form of transit in Mexico and you’re likely to be riding with Mobility ADO. Behind the scenes of many of these devices is connected technologies, which provide data on maintenance, operations, and more. In total, Mobility ADO has more than 38,000 endpoints under management. In charge of […]
Early on October 28, we got to know that personal and medical details – including names, social security numbers, and diagnostics images – of more than 3 million U.S. patients are available online, unprotected and accessible to anyone who knows how to search for it. Later that same day, the Cybersecurity and Infrastructure Security Agency […]