Blog

As the 2019 calendar year winds down, I’ve spent some time reflecting on how the year has gone and quickly realized what a blur it’s been. We’ve seen new forms of advanced malware arise, expanding attack surfaces within our organizations, significant cyber events like the one targeting Norsk Hydro, and much more over the course […]

Executive Summary Forescout Research Labs has discovered and disclosed multiple vulnerabilities in state-of-the-art systems for video conferencing manufactured by DTEN. These systems are commonly used as touchscreen smart TVs and collaborative, real-time whiteboards within large enterprises in conjunction with Zoom Meetings. While systems like the DTEN D7 video conferencing solution facilitate better collaboration across geographies […]

Operational technology (OT) infrastructure is changing faster than ever before. The capabilities in this space are rapidly evolving – with new ways to control operations, increase efficiency, and streamline processes – all thanks to our always-online world. As these cyber-physical systems emerge in critical infrastructure environments, a new, niche OT cybersecurity market has developed and […]

Over the past decade, water and wastewater utilities, much like electric utilities, have become more dependent on the internet to carry out their daily operations. Water and wastewater plants rely on the same industrial control systems (ICS) and applications prevalent in most process automation and energy facilities, and are therefore subject to similar cyberthreats. Considering […]

The Internet of Medical Things (IoMT) continues to offer exciting possibilities for healthcare organizations to improve patient care. However, this digital transformation and increase in connectivity is also introducing new privacy and security risks. The device landscape is growing exponentially, adding to the complexity of networks and making it difficult to manage and improve overall […]

Retail Black Friday is coming, MageCart cybercriminals skim Macy’s, customer payment info stolen: Following previous FBI warnings about e-commerce data threats, Macy’s, one of the biggest retailers in the US, announced a MageCart supply chain attack and a “small number” of customer payment records stolen. The attack relied on malicious code to intercept and save […]

Have you ever been asked to look around and introduce yourself to the people surrounding you? As you look, you’ll notice that your own business is just like the people around you. Everyone has a common problem. Your business is segmented and organized by function, but your IT infrastructure, and accelerating cross communication, is not. […]

Editor’s Choice 33 Key Stats on Cybercrime: If cybercrime were a country, “it would rank 13th in terms of its GDP when considering the most recent (2018) GDP data from the World Bank.” That’s just one of 33 recent cybercrime stats compiled by Casey Crane. https://securityboulevard.com/2019/11/33-alarming-cybercrime-statistics-you-should-know-in-2019/ Operational Technology (OT), Energy and Industrial Control Energy industry […]

When implemented effectively, network segmentation breaks a network into logical zones, limiting the ability of attackers to move laterally across a network and compartmentalizing access. It has long been one of the most tried-and-true methods of ensuring regulatory compliance, mitigating advanced threats, reducing risks to operational technology and reducing the attack surface of Internet of […]