Blog
Exploiting Serial-to-Ethernet Converters in Critical Infrastructure
Forescout Vedere Labs uncovers 22 new vulnerabilities from two serial to Ethernet converter makers. See what was discovered and how to mitigate.
Our Connected World With the rise of automation, remote access, and the ever-expanding Internet of Things (IoT), IT and OT teams are collaborating at an unprecedented rate to strengthen organizational network security. Business operations that rely on machinery and physical processes are no longer disconnected from the world, nor from the enterprise network. Statista estimates […]
Twitter: @MeetCyberBob All the Ts — OT, IT, IoT… As technology professionals, it’s in our blood to simplify everything — and that’s why we love acronyms. Rumor has it there’s even a 4-level acronym — 4 levels of acronyms before you get to the full term… But I digress. As we optimize processes, all the […]
Back to the basics: Cybersecurity experts are ringing the alarm on critical infrastructure facilities being more vulnerable to attacks then ever. The main challenge is that critical, high-availability systems cannot be shut down for thorough testing and risk analysis, as they need to be available 24/7. This creates an endless loop of uncertainty over how […]
What do you consider the most foundational activity of any solid cybersecurity program? In my opinion, and many others’, it all starts with knowing what your assets are. This is also reflected in many of the top controls and standards that we follow today, such as the SANS Center for Internet Security (CIS) Top 20 […]
Healthcare delivery organizations (HDOs) are repeatedly cited as lagging when it comes to cybersecurity practices—and consequently, healthcare is also often the most targeted industry. A recent study found that healthcare organizations and hospitals report one fourth of all U.S. cyberattacks, making healthcare the number one industry impacted by data breaches. And, there have been no […]
Public Sector Why should we pay more attention to cybercriminals: One of the major forensic services providers in the UK is issuing a warning that we as a society might not be as ready to deal with cyberattacks as we would like to believe. The company itself was a subject of a massive attack by […]
Too Many Tools, Even More Alerts The evolving threat landscape of industrial networks, and the various tools used to manage them, have forever changed the job of the average CISO and cybersecurity analyst. Many organizations have responded to this challenge in one of two ways: either burying their head in the sand and hoping for […]
Twitter: @MeetCyberBob Early this morning I have landed in Munich, Germany, to attend meetings with my team and customers. Well, when I say, ‘I have landed’, actually it was the wonderful pilots that landed the plane safely. The landing took place after a little more than normal turbulence occurred, which got me thinking – what […]
Skyrocketing cyber and operational risk from the ever-expanding overlap between information technology (IT) and operational technology (OT) networks is forcing many organizations to assess and improve their cybersecurity postures to meet the challenges of the Fourth Industrial Revolution. With the exposure of legacy OT devices to the Internet, and new attacks specifically built for them, […]