Blog

The Infamous Windows Print Spooler Service Hit Again During June’s 2021 Patch Tuesday, Microsoft addressed a minor local privilege escalation (LPE) vulnerability (CVE-2021-1675) in the Windows Print Spooler service (spoolsv.exe), which is responsible for printing management in Windows. Almost two weeks later, the vulnerability impact was changed from LPE to Remote Code Execution (RCE) after […]

The Enterprise of Things has reached a critical mass and companies everywhere across every industry from healthcare to financial services and manufacturing are struggling to defend their networks against unagentable and unmanaged devices, including IoT and OT. Forescout solves this problem today and helps customers secure the hundreds or thousands of devices connecting across their […]

The analysis behind VMware vCenter Server RCE vulnerability On June 4, 2021, the Cybersecurity & Infrastructure Security Agency (CISA) released an alert, asking VMware customers to urgently patch their systems due to the likelihood of cyber threat actors attempting to exploit the company’s vCenter Server and Cloud Foundation products. The related vulnerabilities were assigned respectively […]

Update: On July 19, the Transportation Security Administration (TSA) released their second security directive for pipelines (SD-2021-02), contents of which were made public by the Washington Post on October 3. While the first security directive focused on establishing key roles (e.g. cybersecurity coordinator), definitions, and responsibilities, the second security directive requires adherence to security controls […]

The COVID-19 pandemic forced a hurried shift to remote work in 2020 and organizations had to prioritize employee productivity and remote access. While home and public networks, along with cloud-based applications kept everyone working, they also introduced a hidden threat. As lockdown restrictions lift and offices prepare to reopen, we must now address the risk […]

Quickly and accurately ensure effective segmentation through traffic visualization The recent Colonial Pipeline cybersecurity incident and subsequent pipeline shutdown highlights the need to limit the blast radius of incidents affecting critical infrastructure. Last year a similar but less-publicized incident occurred when an attacker gained access to a natural gas compression facility’s IT network and then […]

Network segmentation is a primary risk mitigating strategy against current cyber security threats, namely ransomware. However, enterprise-wide adoption within healthcare delivery organizations (HDOs) has been low. Why? There’s a perception that segmentation is too complex, requires specialized implementation skills and might add risks of disruption to clinical care. More pointed, when you don’t have an […]

Cybersecurity is not a partisan issue; it is a national security issue. While previous administrations have issued cybersecurity-related executive orders with clear calls-to-action for federal agencies to follow, this executive order is significant given the recent cybersecurity incidents. From SolarWinds to Colonial Pipeline, the increasing volume of cyber attacks has shown how incidents can significantly […]

Securing critical infrastructure has been a growing concern for many years as major breaches spanning a wide range of industrial sectors consistently make headlines. The latest being the recent attack on Colonial Pipeline from a cyber-criminal group named Darkside, which came only days after the U.S. Department of Energy (DOE) announced a 100-day Plan to […]