Blog
Exploiting Serial-to-Ethernet Converters in Critical Infrastructure
Forescout Vedere Labs uncovers 22 new vulnerabilities from two serial to Ethernet converter makers. See what was discovered and how to mitigate.
-
Intro to Modern NAC
What is Network Access Control? It’s a simple question, right? Actually, NAC is a broad term in a category that is rapidly evolving. At a high level, NAC just describes a security policy in which specific devices receive differing levels of network access based on a given set of conditions. Early NAC solutions used 802.1X […]
Read More -
New Botnet on the Block – Persirai
Twitter: @darrell_kesti Move over Mirai, there is a new IoT botnet on the block – Persirai (Persian Mirai). This has been an interesting one to watch. First, this botnet was recently discovered by cybersecurity researches at Trend Micro (article here) and it targets 1,000 different models of vulnerable IP Cameras…yeah you didn’t misread that, 1,000 […]
Read More -
IoT Devices in the Network: Can you find them?
Twitter: @SecurityMonahan In the last year or so, the topic of Internet of Things (IoT) received a lot of attention. Both the concept of the topic and scope of what should be included in IoT changed dramatically in that time. The first commercialization of IoT were wearables such as GoogleGlass. Shortly thereafter came the next […]
Read More -
COMPLETE NETWORK INTEGRATION IS THE FOUNDATION FOR EVERYTHING!!!
The title for the article was not accidentally put in all CAPS; I’m shouting it! In this article, we will focus on learning every MAC and IP address on your network as quickly as possible. This is the foundation for the real-time visibility that CounterACT provides. Like all foundations, there is nothing “sexy” about it. […]
Read More -
It’s Not Your Father’s NAC: Next-generation NAC
It wasn’t too long ago that network access control (NAC) was a very complex technology. It required authentication, authorization and accounting (AAA), RADIUS and supplicants that are different on each operating system or even missing in the case of devices such as printers. Besides being hard to implement, NAC 1.0 was very rigid and restrictive: […]
Read More -
NAC Deployment With Minimal Network Changes
When working with new customers deploying network access control, I am often asked: “How can servers be secured with minimal change in the network?” This is very relevant since often many departments own the network, and IT may not have full authority over the entire network. CounterACT can quickly and completely secure traffic to internal […]
Read More