Blog

Building on our previous blog posts, we’ll now dive into some of the more advanced use cases we’re seeing in the field for the Respond function of the NIST Cybersecurity Framework (CSF). This Function requires organizations to develop and implement the appropriate activities to take action if a cybersecurity incident is detected. Its intent is […]

Incident Response Updates: Forescout customers using SilentDefense can now detect both vulnerable devices AND exploit attempts targeting CVE-2020-0976. To access Forescout’s latest SilentDefense SD-script, which includes coverage for CVE-2020-0976, ask your OT account representative. Forescout customers can identify vulnerable devices by downloading VR SMBGhost in the Forescout Security Policy Template (SPT) v20.0.03. Join the Research […]

Today, running a healthy hospital means much more than curing diseases and fixing broken bones. It also means making sure the underlying technology is strong and secure enough to support those operations. Hospitals, clinics and other healthcare organizations are adding more connected devices to their networks than ever before. These devices add significant benefits, like […]

Continuing our blog series on how to jumpstart your NIST Cybersecurity Framework (CSF) maturity, we’ll now dive into some of the industry-leading use cases we’re seeing for the Detect function. This is the function that really brought operational technology (OT) security to the mainstream back in the early 2010s when some of the first intrusion […]

A short guide on how to deal with common challenges faced by ICS asset owners in the modern manufacturing industry The drive to increase productivity and reduce costs in manufacturing environments has led to an exponential increase in the adoption of automation on plant floors. This integration of computation, networking and physical processes is what […]

In March 2018, the City of Atlanta faced a maelstrom of ransomware and other attacks that shuttered resources and sent the IT team into a complex tailspin. According to a recent Wall Street Journal article that featured the attack, the recovery cost the City $7M and took over a year. The City rallied and brought […]

Simplify and Accelerate Enterprise-Wide Network Segmentation Enterprise-wide segmentation requires a context-driven, multilayered architecture to address today’s broad diversity of device types—regardless of where they connect to the network. Forescout launched its eyeSegment product in November 2019. This cloud-based addition to the Forescout platform simplifies and accelerates the design, planning and deployment of dynamic network segmentation […]

As we discussed in our recent joint report with the Institute for Critical Infrastructure Technology (ICIT), disruptionware is an emerging category of malware designed to slow or stop critical business processes, rather than simply withhold data. This trend recently played out yet again when DHS CISA published an alert that a cyberattack against a US […]

PROFINET vulnerability impacts wide range of Industrial Ethernet devices Updates: March 18: Forescout customers using eyeInspect can now detect Siemens and Moxa devices with vulnerable firmware versions. To access Forescout’s eyeInspect latest Vulnerability Database, which includes detection for Siemens CVE-2019-13946 and Moxa CVE-2019-19707, ask your OT account representative. Dozens of critical Industrial Ethernet devices have […]