Blog

In my recent blog, I recapped a conversation with Jack Jones, Chairman of the FAIR Institute and Gaurav Pal, CEO of stackArmor, where they debunked three myths about why risk quantification seems so difficult. The reality is that each year threat actors become more savvy and the attacks they use become more sophisticated while corporate […]

Automated Threats Remote Desktop Protocol (RDP) leads to major BitPaymer exploits—Windows Server 2012 BlueKeep vulnerability suspected as the way in: Everis, one of the largest managed service providers in Spain, got hit by what seems to be a BitPaymer ransomware attack. Their network connection was allegedly cut off by their ISP to stop the spread of […]

With quantifying and mitigating cyber and operational risk now becoming a board-level priority, oil & gas asset owners are beginning to craft long term risk reduction strategies. To truly mitigate operational and safety risk, oil & gas companies need to fully understand the threats to their OT networks and their origin. One offshore drilling contractor […]

For the past 20 years, the principles of network access control have remained mostly the same. Organizations would implement NAC in a super binary way. Devices were either allowed on the network or they were blocked. They either got corporate-level access or they were restricted to guest. Those were the options. But the technology landscape […]

Editor’s Choice An Indian nuclear power plant suffered a cyberattack. Device control has never been more important, as “an investigation by India’s Department of Atomic Energy revealed that a user had connected a malware-infected personal computer to the plant’s administrative network.” As Washington Post journalist Debak Das astutely notes: “Air-gapped nuclear facilities can be attacked… […]

Industry analysts predict that by next year (2020), 1 in every 4 attacks in enterprises will involve an IoT device. Verizon’s 2019 Mobile Security Survey showed that over three quarters of respondents believe that IoT devices are the greatest cybersecurity threat facing organizations. Despite these frank results and dire predictions, Symantec’s IoT research team discovered, […]

Researchers recently discovered a cryptomining malware attack that spread to a number of workstations at a major international airport in Europe. The malware, designed evade discovery, was detected by only 16 out of 73 tools available in VirusTotal, an online service specializing in analyzing files and web locations for malicious content. The abnormal behavior of […]

Automated Threats: Manufacturing and Financial Services BitPaymer ransomware strikes German manufacturer Pilz: German efficiency is on hold for Pilz, one of the world’s largest manufacturers of automation tools. For more than a week, Pilz has learned the hard way about the impact ransomware can have to operations. All Pilz locations worldwide are affected and disconnected […]

The number of IoT devices is expected to rise to 20.6 billion by 2020, according to Gartner. These devices bring many benefits to a business, like increased collaboration or better monitoring of critical systems. But for security teams, having a holistic view of what is connected, as well as where it connects, is critical for […]