Blog

Executive summary A set of 19 vulnerabilities, collectively called Ripple20, affecting the widely used Treck embedded IP stack, have been disclosed by the cybersecurity research company JSOF. Four of the vulnerabilities have a critical CVSS score, with impact including Remote Code Execution and Exposure of Sensitive Information. The vulnerabilities potentially impact tens of millions of […]

Over the past number of weeks, Sajed Naseem, CISO for the New Jersey Courts has been on a mission to ensure that justice could be preserved in this new remote working world. He has been an instrumental piece of the institution’s transition to remote court proceedings across 750 locations and more than 50,000 devices. I […]

There are few moments in a company’s lifetime that you can truly deem as monumental. I’ve been lucky enough to be present for a few of these at Forescout, like ringing the opening bell for our IPO or launching our first cloud product. Today is another one of those days. We just successfully closed our […]

Over the last number of years, enterprise organizations have turned into an Enterprise of Things made up of billions of connected devices, including PCs, mobile systems, and cloud workloads attached to today’s networks, as well as Internet of Things (IoT) and operational technology (OT) devices.  The reality is that the number and diversity of devices […]

Each year threat actors become savvier and deploy newer attack tactics. Organizations end up buying newer and more security tools to keep up with the bad guys. The multiplicity of security solutions cascades into heavy manual workloads for security operations team as they now have to manage and manually orchestrate security workflows amongst these 3rd […]

As part of Microsoft’s traditional Patch Tuesday in July, CVE-2020-1350 (codenamed “SIGRed”) was fixed and disclosed publicly. This vulnerability is very serious, with a CVSS score of 10, and allows remote unauthenticated attackers to run arbitrary code with elevated privileges. The Vulnerability The vulnerable component is the Windows DNS Server. Windows DNS clients and DNS […]

We are truly living in unprecedented times as we navigate through this global COVID-19 crisis. While this is especially true when it comes to our health and safety, it also applies to the cybersecurity teams that must protect a workforce that in many cases has shifted remote practically overnight. What’s more, cyberattacks against certain types […]

The modern enterprise is rapidly evolving from an on-prem network with a hard-shell security perimeter to a network of networks – and the diverse devices that form them. Are there devices that stand out as higher risk? If so, what is the business impact and how do we manage the risk? In this first edition […]

After we first reported on the EKANS ransomware back in February there have been three big new developments. First, a large hospital operator was hit by the malware and had its operations disrupted and patient data leaked online. Second, the malware forced a large automotive manufacturer to shut down some of its factories worldwide, as […]