Blog
Exploiting Serial-to-Ethernet Converters in Critical Infrastructure
Forescout Vedere Labs uncovers 22 new vulnerabilities from two serial to Ethernet converter makers. See what was discovered and how to mitigate.
Have you ever been asked to look around and introduce yourself to the people surrounding you? As you look, you’ll notice that your own business is just like the people around you. Everyone has a common problem. Your business is segmented and organized by function, but your IT infrastructure, and accelerating cross communication, is not. […]
When implemented effectively, network segmentation breaks a network into logical zones, limiting the ability of attackers to move laterally across a network and compartmentalizing access. It has long been one of the most tried-and-true methods of ensuring regulatory compliance, mitigating advanced threats, reducing risks to operational technology and reducing the attack surface of Internet of […]
In my recent blog, I recapped a conversation with Jack Jones, Chairman of the FAIR Institute and Gaurav Pal, CEO of stackArmor, where they debunked three myths about why risk quantification seems so difficult. The reality is that each year threat actors become more savvy and the attacks they use become more sophisticated while corporate […]
With quantifying and mitigating cyber and operational risk now becoming a board-level priority, oil & gas asset owners are beginning to craft long term risk reduction strategies. To truly mitigate operational and safety risk, oil & gas companies need to fully understand the threats to their OT networks and their origin. One offshore drilling contractor […]
For the past 20 years, the principles of network access control have remained mostly the same. Organizations would implement NAC in a super binary way. Devices were either allowed on the network or they were blocked. They either got corporate-level access or they were restricted to guest. Those were the options. But the technology landscape […]
Industry analysts predict that by next year (2020), 1 in every 4 attacks in enterprises will involve an IoT device. Verizon’s 2019 Mobile Security Survey showed that over three quarters of respondents believe that IoT devices are the greatest cybersecurity threat facing organizations. Despite these frank results and dire predictions, Symantec’s IoT research team discovered, […]
Researchers recently discovered a cryptomining malware attack that spread to a number of workstations at a major international airport in Europe. The malware, designed evade discovery, was detected by only 16 out of 73 tools available in VirusTotal, an online service specializing in analyzing files and web locations for malicious content. The abnormal behavior of […]
The number of IoT devices is expected to rise to 20.6 billion by 2020, according to Gartner. These devices bring many benefits to a business, like increased collaboration or better monitoring of critical systems. But for security teams, having a holistic view of what is connected, as well as where it connects, is critical for […]
Our Connected World With the rise of automation, remote access, and the ever-expanding Internet of Things (IoT), IT and OT teams are collaborating at an unprecedented rate to strengthen organizational network security. Business operations that rely on machinery and physical processes are no longer disconnected from the world, nor from the enterprise network. Statista estimates […]