Blog
Exploiting Serial-to-Ethernet Converters in Critical Infrastructure
Forescout Vedere Labs uncovers 22 new vulnerabilities from two serial to Ethernet converter makers. See what was discovered and how to mitigate.
Update July 9, 2024: In 2024, the standard’s body has updated the framework. Here’s what you need to know about NIST CSF 2.0. The NIST Framework for Improving Critical Infrastructure Cybersecurity, commonly referred to as the NIST Cybersecurity Framework (CSF), provides private sector organizations with a structure for assessing and improving their ability to […]
There’s no argument that the operational technology (OT) security market is officially in transition. Acquisitions are accelerating, venture capital investment is slowing, and strategic partnerships are becoming critically important. OT systems themselves are also in a transitional state, as traditional, isolated legacy systems turn into fully IP-connected, cyber-physical systems. To stay relevant in the OT […]
Confronting Ransomware: Advice for State/Local Government and Legislators Media coverage of ransomware-impacted counties and cities has focused on whether the ransom was paid, known or suspected causes, and cost/recovery efforts. But there should be one more area of focus: small, local governments are especially vulnerable to ransomware cyberattacks because they often lack financial resources and […]
It’s that time of year again, where we sit down as a team at Forescout and discuss what trends we expect to accelerate and what new ones will emerge in the next 12 months. This year felt more difficult than usual to pick out the trends that will matter in the year to come. The […]
As the 2019 calendar year winds down, I’ve spent some time reflecting on how the year has gone and quickly realized what a blur it’s been. We’ve seen new forms of advanced malware arise, expanding attack surfaces within our organizations, significant cyber events like the one targeting Norsk Hydro, and much more over the course […]
Executive Summary Forescout Research Labs has discovered and disclosed multiple vulnerabilities in state-of-the-art systems for video conferencing manufactured by DTEN. These systems are commonly used as touchscreen smart TVs and collaborative, real-time whiteboards within large enterprises in conjunction with Zoom Meetings. While systems like the DTEN D7 video conferencing solution facilitate better collaboration across geographies […]
Operational technology (OT) infrastructure is changing faster than ever before. The capabilities in this space are rapidly evolving – with new ways to control operations, increase efficiency, and streamline processes – all thanks to our always-online world. As these cyber-physical systems emerge in critical infrastructure environments, a new, niche OT cybersecurity market has developed and […]
Over the past decade, water and wastewater utilities, much like electric utilities, have become more dependent on the internet to carry out their daily operations. Water and wastewater plants rely on the same industrial control systems (ICS) and applications prevalent in most process automation and energy facilities, and are therefore subject to similar cyberthreats. Considering […]
The Internet of Medical Things (IoMT) continues to offer exciting possibilities for healthcare organizations to improve patient care. However, this digital transformation and increase in connectivity is also introducing new privacy and security risks. The device landscape is growing exponentially, adding to the complexity of networks and making it difficult to manage and improve overall […]