Blog
Exploiting Serial-to-Ethernet Converters in Critical Infrastructure
Forescout Vedere Labs uncovers 22 new vulnerabilities from two serial to Ethernet converter makers. See what was discovered and how to mitigate.
-
Analysis: A New Ransomware Group Emerges from the Change Healthcare Cyber Attack
Updated November 2024 Billing systems for Change Healthcare are now back up and running nine months after the ransomware attack on this major clearinghouse for billing and payment processing, according GovTech. Owned by UnitedHealthGroup, Change Healthcare fell victim to one of the largest ransomware attacks in history in February after it was discovered it did […]
Read More -
Detect the Most Common Ransomware TTPs to Prevent Attacks
The recent high-profile cyberattack on MGM Resorts International, still under investigation, put ransomware back in the public spotlight. News reports and social media posts cited widespread issues with deactivated digital room keys locking guests out of their rooms; slot machines, ATMs and elevators taken offline; and websites taken down. Over a dozen MGM hotels and casinos reportedly had to shut down operations for 10 days. This time, what happened in Vegas didn’t stay in Vegas.
Read More -
Post Quantum Cryptography: An Urgent Global Cybersecurity Imperative
Every few months there is news about the latest ‘quantum supremacy’ being smashed. This past June, the company Quantinuum published a report that its new computer had “broken a world record … topping the performance of benchmarking set by Google’s Sycamore machine by 100-fold,” according to LiveScience. As nations race to develop quantum technologies, the […]
Read More -
What You Need to Know About the NIST Cybersecurity Framework 2.0
Update: This blog has been updated to include the new CISA Cross-Sector Cybersecurity Performance Goals that are now organized to align with NIST CSF 2.0. Ten years ago, the National Institute of Standards and Technology (NIST) released the Cybersecurity Framework (CSF) 1.0 following an Executive Order from President Obama to help companies and governments facing cybersecurity attacks. […]
Read More -
Asset Intelligence: Why ‘Know Your Asset’ Is the New KYC
Cybersecurity needs to borrow from the financial industry’s ‘Know Your Customer’ model. See how to apply it within asset intelligence via KYA.
Read More -
Research: Isolating the Persistent Risk of IoMT Devices
Forescout examines the underlying cybersecurity risk of IoMT devices using data from 45 healthcare networks and 2 million device assets.
Read More -
ICS Threats: Malware Targeting OT? It’s More Common Than You Think
ICS threats are real. Our research shows malware botnets and tactics targeting IoT are more common in industrial OT environments.
Read More -
American Water’s Security Incident: Ransomware or Something Else?
American Water discloses a cybersecurity incident in October 2024. We examine common cybersecurity and OT/ICS issues in the water industry.
Read More -
Cybersecurity Asset Management: Asset Visibility Vs. Asset Intelligence
Today’s cybersecurity asset management requires more than visibility of your network. Learn about the value and benefits of asset intelligence.
Read More