Blog

Network segmentation has become a valuable tool to protect data and manage the attack surface during any cybersecurity incidents. It’s also a critical component of Zero Trust programs and organizations’ ability to maintain compliance amid numerous regulations being introduced by governments and industry bodies. Yet, enterprises should not hesitate when it comes to implementing network […]

On August 10, the Office of Management and Budget (OMB) released guidance to civilian agencies on how to implement the goals of the May 12 Executive Order on Improving the Nation’s Cybersecurity with regard to software that is considered “critical.” Agencies have just 60 days to identify “critical software” and 1 year to implement enhanced […]

Forescout Research Labs and JFrog Security Research have discovered a set of 14 new vulnerabilities affecting the NicheStack TCP/IP stack, which we are collectively calling INFRA:HALT. The new vulnerabilities allow for remote code execution, denial of service, information leak, TCP spoofing, or DNS cache poisoning. NicheStack is used in Operational Technology (OT) devices commonly found in several critical […]

On July 2, news emerged of a large-scale attack leveraging the Kaseya VSA network monitoring and management solution to deploy a variant of the REvil ransomware. The attackers claimed that more than a million devices had been infected and they demanded $70 million in Bitcoin to publish a tool to decrypt the files of all […]

The Infamous Windows Print Spooler Service Hit Again During June’s 2021 Patch Tuesday, Microsoft addressed a minor local privilege escalation (LPE) vulnerability (CVE-2021-1675) in the Windows Print Spooler service (spoolsv.exe), which is responsible for printing management in Windows. Almost two weeks later, the vulnerability impact was changed from LPE to Remote Code Execution (RCE) after […]

The Enterprise of Things has reached a critical mass and companies everywhere across every industry from healthcare to financial services and manufacturing are struggling to defend their networks against unagentable and unmanaged devices, including IoT and OT. Forescout solves this problem today and helps customers secure the hundreds or thousands of devices connecting across their […]

The analysis behind VMware vCenter Server RCE vulnerability On June 4, 2021, the Cybersecurity & Infrastructure Security Agency (CISA) released an alert, asking VMware customers to urgently patch their systems due to the likelihood of cyber threat actors attempting to exploit the company’s vCenter Server and Cloud Foundation products. The related vulnerabilities were assigned respectively […]

Update: On July 19, the Transportation Security Administration (TSA) released their second security directive for pipelines (SD-2021-02), contents of which were made public by the Washington Post on October 3. While the first security directive focused on establishing key roles (e.g. cybersecurity coordinator), definitions, and responsibilities, the second security directive requires adherence to security controls […]

The COVID-19 pandemic forced a hurried shift to remote work in 2020 and organizations had to prioritize employee productivity and remote access. While home and public networks, along with cloud-based applications kept everyone working, they also introduced a hidden threat. As lockdown restrictions lift and offices prepare to reopen, we must now address the risk […]