Blog

Black Hat is always an interesting event, and this year was no exception. Bounties for attacking devices were running rumor mills floating around the floor. Presentations showed off everything from phones being compromised to IoT hacks. Needless to say, everyone was keeping vigilant as they walked around the conference. The talk of the town for […]

The Forescout Cyber Roundup is a weekly blog series that highlights some of the major cyber headlines, as well as some of the more obscure stories from the week. The purpose of this curation is to raise cyber awareness, provoke thought and encourage discussion among cyber professionals at all levels. Articles are categorized by industry, […]

From time to time, we come across some interesting FAIR related thoughts being shared by our partners. Last week, a fascinating webinar was hosted by Institute Technical Advisor, RiskLens, that included presentations from two FAIR Institute members, Ian Amit, Chief Security Officer at Cimpress, and Chip Block, Vice President and Chief Solutions Architect at Converged […]

The Forescout Cyber Roundup is a weekly blog series that highlights some of the major cyber headlines, as well as some of the more obscure stories from the week. The purpose of this curation is to raise cyber awareness, provoke thought and encourage discussion among cyber professionals at all levels. Articles are categorized by industry, […]

The Zoom zero-day hit. Then, Forescout Researchers were curious enough to venture forth to the emergency web conference of Zoom Video Communications, in which Zoom CEO Eric Yuan led his organization through its incident response to an uncomfortable Remote Code Execution (RCE) bug in its enterprise software. The Zoom MacOS client vulnerability was interesting: It […]

Executive Summary Critical vulnerabilities have been disclosed exposing billions of embedded OT devices. Use Forescout to discover and inventory VxWorks devices to prioritize critical patch updates. Segment and control network access for vulnerable VxWorks versions using the Forescout platform. Use eyeInspect to alert and block some of the attacks exploiting VxWorks. Extend detection coverage using […]

Twitter: @MeetCyberBob Those of you that have worked with me for the past few years know that the language and success of RADIUS Port Authentication have been a part of my DNA for many years… I feel comfortable with the language it speaks but have never been comfortable with the disruption it presents. We’ve all […]

The Internet of Things (IoT) revolution presents a multitude of new cybersecurity challenges stemming from the rapid increase in the number of devices in most organizations’ networks. These devices are mostly unmanaged, come from a multitude of vendors, use non-standard operating systems, support a diversity of, often unencrypted, protocols, and may dynamically connect to other […]

Attacks on smart lighting IoT devices could one day send the smart building back to the dark ages There have been a number of interesting Internet of Things (IoT) inventions over the last decade. Some of these IoT devices have been built simply because they could be, not because there was a need—things like a […]