Blog

As cybercriminal sophistication continues to grow, tools and techniques used to exploit ICS and OT are extending to new targets like the Honeywell, Thingworx, and GE targets of EKANS, a new Windows ransomware with ICS-specific targets. Attribution is challenging, but if it proves true that the technical advances are made by cybercriminals instead of state-sponsored […]

In the 21st century, water and wastewater management companies, much like electric utilities, have become more dependent on IP-connected devices to operate efficiently. Water and wastewater utilities rely on many of the same equipment providers as electric power companies, and are therefore subject to similar cyberthreats. Because of this, many water and wastewater utilities are […]

Because electric utility companies power almost everything we enjoy in today’s connected society, they’re facing mounting pressure to ensure operational continuity in the face of increasing cyberthreats that specifically target industrial control system (ICS) networks. These organizations have important obligations when it comes to securing their infrastructure, and the need to enhance ICS cybersecurity and […]

Incident Response Updates: Jan. 14-15: Forescout security policies deployed across multiple public sector networks Jan. 15-16: Multiple PoC exploits published for CurveBall/ChainOfFools (Windows CVE-2020-0601) Jan. 16: Sample Forescout security policies shared and available via Forescout Community Download VR CryptoAPI in Forescout Security Policy Template (SPT) v20.0.01. The NSA recently reported a widespread and dangerous Microsoft […]

Twitter: @LNSundra Every few years, Microsoft causes some panic across industry sectors by announcing the end-of-life of one of its older Windows operating systems. Well, today is the “end of life” for Windows 7, meaning Microsoft will no longer regularly update the system with fixes when a security vulnerability is found. The company has urged […]

Update July 9, 2024: In 2024, the standard’s body has updated the framework. Here’s what you need to know about NIST CSF 2.0.   The NIST Framework for Improving Critical Infrastructure Cybersecurity, commonly referred to as the NIST Cybersecurity Framework (CSF), provides private sector organizations with a structure for assessing and improving their ability to […]

There’s no argument that the operational technology (OT) security market is officially in transition. Acquisitions are accelerating, venture capital investment is slowing, and strategic partnerships are becoming critically important. OT systems themselves are also in a transitional state, as traditional, isolated legacy systems turn into fully IP-connected, cyber-physical systems. To stay relevant in the OT […]

Confronting Ransomware: Advice for State/Local Government and Legislators Media coverage of ransomware-impacted counties and cities has focused on whether the ransom was paid, known or suspected causes, and cost/recovery efforts. But there should be one more area of focus: small, local governments are especially vulnerable to ransomware cyberattacks because they often lack financial resources and […]

It’s that time of year again, where we sit down as a team at Forescout and discuss what trends we expect to accelerate and what new ones will emerge in the next 12 months. This year felt more difficult than usual to pick out the trends that will matter in the year to come. The […]