Blog

Cyber assessment should be ongoing during the mergers and acquisitions process, not a point-in-time exercise. Much like technology waves, we’ve seen a number of mergers and acquisitions (M&A) waves over the years, with spikes in the late 90s, followed by a fairly sharp drop in 2002, another spike in 2007, and a steady increase to […]

Background The BlueKeep vulnerability was first reported by the UK’s National Cyber Security Centre (NCSC) and acknowledged by Microsoft on May 14, 2019. To be successful, the exploit must occur before authentication; however, no user interaction is required for remote attackers to execute arbitrary code on the target system. If successful, attackers can alter or […]

Twitter: @MeetCyberBob IoT security faces many challenges stemming from vulnerabilities present in many operating systems, including widely-used Windows releases. Without taking the time to regularly update and patch our devices, businesses face a myriad of IoT security threats. The Common Vulnerabilities and Exposures database, more commonly known as CVE, lists 775 vulnerabilities for Windows 10. […]

Utility operators in the United States and Canada must keep pace with the evolving and stringent regulatory requirements of the North American Electric Reliability Corporation’s (NERC) Critical Infrastructure Protection (CIP) standards. Maintaining compliance with NERC CIP has now become even more crucial as standards become stricter and fines more costly, as evidenced by the $10 […]

The 2019 SANS State of OT/ICS Cybersecurity Survey explores the challenges involved with designing, operating, and managing risk to industrial control systems (ICS) and their cyber assets. Security professionals active in IT, OT and hybrid IT-OT domains from around the world took part in the survey to answer the questions about known and perceived cybersecurity […]

Twitter: @MeetCyberBob Infosecurity Europe 2019, otherwise known as Infosec, starts this week. In preparing with our team here at Forescout, I’ve been looking at the program of events. More than ever it looks like speakers are going to talk about how to mitigate business problems to the technologists that will be attending. This is really […]

Another Windows vulnerability has emerged onto the scene affecting an estimated 1 million devices, subsequently placing the industrial operations and critical services of millions at risk of disruption. Of even more concern is that this vulnerability is “wormable”, meaning any future malware using this exploit would quickly spread through all infected devices 1. Microsoft announced […]

The digitalization of industrial automation and critical infrastructure systems has changed the job description for cybersecurity and operations stakeholders in nearly every industrial vertical. These stakeholders are still struggling to meet the demands of today’s evolving threat landscape and growing device networks, and their job isn’t going to get much easier. According to Forrester’s recent […]

New research shows that more than 70% of devices on healthcare networks are running Windows 7—the OS fast approaching end of support. Sales of PCs with Windows 7 Professional preinstalled ended on October 31, 2016. At that time, few gave much thought to the inevitable sunset of the Operating System (OS), but more recently, Microsoft […]