Blog
Exploiting Serial-to-Ethernet Converters in Critical Infrastructure
Forescout Vedere Labs uncovers 22 new vulnerabilities from two serial to Ethernet converter makers. See what was discovered and how to mitigate.
Twitter: @MeetCyberBob All the Ts — OT, IT, IoT… As technology professionals, it’s in our blood to simplify everything — and that’s why we love acronyms. Rumor has it there’s even a 4-level acronym — 4 levels of acronyms before you get to the full term… But I digress. As we optimize processes, all the […]
What do you consider the most foundational activity of any solid cybersecurity program? In my opinion, and many others’, it all starts with knowing what your assets are. This is also reflected in many of the top controls and standards that we follow today, such as the SANS Center for Internet Security (CIS) Top 20 […]
Healthcare delivery organizations (HDOs) are repeatedly cited as lagging when it comes to cybersecurity practices—and consequently, healthcare is also often the most targeted industry. A recent study found that healthcare organizations and hospitals report one fourth of all U.S. cyberattacks, making healthcare the number one industry impacted by data breaches. And, there have been no […]
Too Many Tools, Even More Alerts The evolving threat landscape of industrial networks, and the various tools used to manage them, have forever changed the job of the average CISO and cybersecurity analyst. Many organizations have responded to this challenge in one of two ways: either burying their head in the sand and hoping for […]
Twitter: @MeetCyberBob Early this morning I have landed in Munich, Germany, to attend meetings with my team and customers. Well, when I say, ‘I have landed’, actually it was the wonderful pilots that landed the plane safely. The landing took place after a little more than normal turbulence occurred, which got me thinking – what […]
Skyrocketing cyber and operational risk from the ever-expanding overlap between information technology (IT) and operational technology (OT) networks is forcing many organizations to assess and improve their cybersecurity postures to meet the challenges of the Fourth Industrial Revolution. With the exposure of legacy OT devices to the Internet, and new attacks specifically built for them, […]
In the Internet of Things (IoT), enterprise access to the cloud has increased in population, a blessing that allows for more flexibility and productivity around the world. With everything stored online and cloud apps independent from most restrictions, as they do not require installation and are accessible 24×7 from virtually anywhere, operations are becoming more […]
For most organizations, risk has traditionally been measured using quantifiable methods and metrics like financial audit, regulatory compliance, or productivity downtime. Nowadays, cybersecurity has made that task much more challenging. Companies now need to consider new risk factors from cyberattacks, like intellectual property theft, loss of customer data/privacy concerns, and brand and reputation impact. They […]
Twitter: @MeetCyberBob Technology is accelerating business. Nowadays, a whole organization is built within a business just to support the rest of the teams, to streamline data input and output. This, then, should be accelerating the pace of business. So now what happens? At the best of times, we have to deal with scheduled outage windows. […]