Blog
Exploiting Serial-to-Ethernet Converters in Critical Infrastructure
Forescout Vedere Labs uncovers 22 new vulnerabilities from two serial to Ethernet converter makers. See what was discovered and how to mitigate.
Securing Today’s Remote Workforce In these challenging times we’re living in, it seems like everyone is now working from home—and that has consequences. As the remote connectivity landscape transitions to a new paradigm, organizations are trying to maximize cybersecurity and minimize the potential for costly business disruptions that could diminish organizational confidence, stall progress and […]
Join the Forescout Research Labs as we explore the Forescout Device Cloud to illustrate the enterprise “Zoom Effect” and remote access control across major business verticals. Forescout customers can also join the Research Discussion in the Forescout Community and find Security Policy Templates to control devices running Zoom as an approved application in the enterprise. […]
Breach or Blackout? When ransomware locks the grid’s back office Spearphishing. Rogue IoT devices. Brute-forced remote access. Forgotten legacy systems. Unpatched web servers. Compromised vendors. Random USB sticks. Watering holes. Evil janitors. Attack-by-air. Unsecured S3 buckets. Use of valid credentials. Flipped insiders. The occasional zero-day exploit. Luck. There are lots of ways threat actors can […]
Security and risk management leaders at organizations around the world are increasingly concerned about cybersecurity threats to their operational technology (OT) networks. A key driver behind this is that cyberthreats, like disruptionware, are increasing in quantity and sophistication all the time. Industrial control system (ICS) networks are categorized as high risk because they are inherently […]
The Kwampirs malware is a “RAT”, or remote access Trojan, that has recently seen a spike in usage, particularly within the healthcare sector, although it has targeted a broad range of industries globally, including software, pharmaceutical, energy and financial organizations. Kwampirs has been highly effective at targeting healthcare organizations, with malicious actors managing to locally […]
When money was mainly kept in a vault, criminals tried to steal it from every possible angle. Today, financial data stores have replaced physical vaults. These modern vaults are accessed by critical applications across the global financial campus and are typically based in data centers within connected buildings. With financial data as the new currency, […]
In this final post of our series, we’ll discuss the fifth function of the NIST Cybersecurity Framework, Recover. This function requires organizations to develop and implement activities to restore capabilities or services that were impaired due to a cybersecurity event. To comply, organizations need to put a recovery plan into place to get back to […]
Forescout is actively engaged with the defense contractor community to implement Cybersecurity Maturity Model Certification (CMMC) controls. Forescout’s core capabilities that are of particular interest to defense contractors considering the CMMC include: identifying and assessing devices on networks, controlling access to and within the network and addressing many found vulnerabilities—whether by directly remediating, initiating remediation […]
As the COVID-19 pandemic continues to take its toll on the economy, we recognize more clearly than ever that financial services are among a select group of critical economic services, and it is paramount that they remain secure and operational. To assess the cyber risk posture of the financial services industry, Forescout Research Labs recently […]