#forescout — Public Fediverse posts

RE: https://infosec.exchange/@patrickcmiller/116507038237958116

The researchers at #Forescout are super smart on the OT world. You should listen to what they think. IT's scary how bad the ICS world is

New blog posted discussing various forms of “micro-segmentation”, and use of tags instead of IP addresses in ACL’s. With callout to a great post about flows by Daniel Dib with some great comments. https://www.linkedin.com/pulse/microsegmentation-versus-nac-ip-based-acls-peter-welcher-rtoae/
Tags: #PeterWelcher #CCIE1773 #Security #MicroSegmentation #NAC #SecurityGroupTag #Cisco #Elisity #ForeScout #Flows

Infosec products of the month: November 2025 https://www.helpnetsecurity.com/2025/11/28/infosec-products-of-the-month-november-2025/ #BarracudaNetworks #NokodSecurity #BedrockData #Bitdefender #1touch.io #Firewalla #Forescout #Immersive #Action1 #Komodor #Minimus #Cyware #Kentik #Synack #News

New infosec products of the week: November 7, 2025 https://www.helpnetsecurity.com/2025/11/07/new-infosec-products-of-the-week-november-7-2025/ #BarracudaNetworks #Bitdefender #1touch.io #Forescout #Komodor #News

Enterprises are losing track of the devices inside their networks https://www.helpnetsecurity.com/2025/11/06/enterprise-xiot-devices-risk/ #vulnerabilitymanagement #InternetofThings #embeddedsystems #cybersecurity #Forescout #hardware #research #News

Forescout eyeSentry platform delivers continuous, cloud-based exposure management https://www.helpnetsecurity.com/2025/11/04/forescout-eyesentry/ #Industrynews #Forescout

Ransomware is up, zero-days are booming, and your IP camera might be next https://www.helpnetsecurity.com/2025/08/06/ciso-2025-cybersecurity-threat-trends/ #cyberresilience #cybersecurity #cybercrime #ransomware #Don'tmiss #cyberrisk #Forescout #attacks #threats #report #News

Yet another example of a “security product” causing more harm than good 🤦

CVE-2025-4660: #Forescout SecureConnector #RCE

https://www.netspi.com/blog/technical-blog/red-teaming/cve-2025-4660-forescout-secureconnector-rce/

Industrial security is on shaky ground and leaders need to pay attention https://www.helpnetsecurity.com/2025/07/03/ot-iot-threat-detection-confidence/ #threatdetection #cybersecurity #Forescout #report #News #IoT

#Solarkomponenten angreifbar: 35.000 #Admin-Panels frei zugänglich im #Netz

Ein Großteil der ungeschützten Admin-Panels entfällt auf Deutschland. Betroffen sind #Wechselrichter, #Datenlogger und andere #Solarkomponenten.

#Sicherheitsforscher von #Forescout haben unter Einsatz der #Suchmaschine #Shodan öffentlich zugängliche #Admin-Panels von weltweit mehr als 35.000 #Solarkomponenten entdeckt.

https://www.golem.de/news/solarkomponenten-angreifbar-35-000-admin-panels-frei-zugaenglich-im-netz-2506-196831.html

Compromised SAP NetWeaver instances are ushering in opportunistic threat actors https://www.helpnetsecurity.com/2025/05/12/compromised-sap-netweaver-instances-attacks-opportunistic-threat-actors/ #incidentresponse #enterprise #government #Don'tmiss #Forescout #Hotstuff #Mandiant #webshell #Onapsis #News #SAP

Infosec products of the month: April 2025 https://www.helpnetsecurity.com/2025/05/02/infosec-products-of-the-month-april-2025/ #ArcticWolfNetworks #RunSafeSecurity #SkyhawkSecurity #CatoNetworks #IndexEngines #SealSecurity #StellarCyber #Bitdefender #Seemplicity #AbnormalAI #Flashpoint #PowerDMARC #1touch.io #Forescout #AppViewX #BitSight #Bugcrowd #LastPass #PlexTrac #Swimlane #Veracode #CyberQP #Entrust #Exabeam #Saviynt #Varonis #Cyware #News #Jit

New infosec products of the week: April 11, 2025 https://www.helpnetsecurity.com/2025/04/11/new-infosec-products-of-the-week-april-11-2025/ #RunSafeSecurity #IndexEngines #SealSecurity #Forescout #News #Jit

Study Identifies 20 Most Vulnerable Connected Devices of 2025 – Source: www.securityweek.com https://ciso2ciso.com/study-identifies-20-most-vulnerable-connected-devices-of-2025-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #securityweekcom #Vulnerability #securityweek #IoTSecurity #Forescout #ICS/OT #Report #router

Study Identifies 20 Most Vulnerable Connected Devices of 2025 https://www.securityweek.com/study-identifies-20-most-vulnerable-connected-devices-of-2025/ #vulnerability #IoTSecurity #Forescout #ICS/OT #Report #router

Study Identifies 20 Most Vulnerable Connected Devices of 2025 https://www.securityweek.com/study-identifies-20-most-vulnerable-connected-devices-of-2025/ #vulnerability #IoTSecurity #Forescout #ICS/OT #Report #router

Forescout eyeScope provides organizations with insight into their security posture https://www.helpnetsecurity.com/2025/04/09/forescout-eyescope-provides-organizations-with-insight-into-their-security-posture/ #Industrynews #Forescout

Zwecks Auffindbarkeit ein paar Hastags dazu:
Untersuchte Hersteller: #Huawei #Sungrow #GinlongSolis #Goodwatt #GoodWe #SMA
Allgemein: #PV #WR #Wechselrichter #Solar #Inverter #SunDown #Forescout #China #Hacker #SmartHome #IoT
https://www.forescout.com/research-labs/sun-down-a-dark-side-to-solar-energy-grids/
@bsi

Recommendations
Manufacturers
Development • Devices: holistic security architecture including secure boot, binary hardening, anti-exploitation features, permission separation etc
• Applications: proper authorization checks on web applications, mobile applications and cloud backends
Testing • Regular penetration testing on applications and devices • Consider bug bounty programs
Monitoring Web Application Firewalls Remember that a WAF does not protect against logical flaws

Users
Residential and commercial users • Change default passwords and credentials • Use role-based access control • Configure the recording of events in a log • Update software regularly • Backup system information • Disable unused features • Protect communication connections
Commercial and utility installations (in addition) •
Include security requirements into procurement considerations
• Conduct a risk assessment when setting up devices • Ensure network visibility into solar power systems • Segment these devices into their own sub-networks • Monitor those network segments

China-based Silver Fox spoofs healthcare app to deliver malware https://www.helpnetsecurity.com/2025/02/25/china-based-silver-fox-spoofs-healthcare-apps-dicom-viewer-to-deliver-valleyrat-malware/ #softwaredevelopment #programming #healthcare #Don'tmiss #Forescout #Hotstuff #backdoor #China #News #APT

Researchers reveal OT-specific malware in use and in development https://www.helpnetsecurity.com/2024/12/17/ot-specific-malware-siemens-industrial-iot/ #malwareanalysis #VirusTotal #Don'tmiss #Forescout #Hotstuff #Claroty #malware #News #IIoT #IoT #OT

Undocumented DrayTek Vulnerabilities Exploited to Hack Hundreds of Orgs https://www.securityweek.com/undocumented-draytek-vulnerabilities-exploited-to-hack-hundreds-of-orgs/ #Malware&Threats #Vulnerabilities #MonstrousMantis #Forescout #DrayTek #ZeroDay

Undocumented DrayTek Vulnerabilities Exploited to Hack Hundreds of Orgs https://www.securityweek.com/undocumented-draytek-vulnerabilities-exploited-to-hack-hundreds-of-orgs/ #Malware&Threats #Vulnerabilities #MonstrousMantis #Forescout #DrayTek #ZeroDay

Maximizing security visibility on a budget https://www.helpnetsecurity.com/2024/11/05/barry-mainz-forescout-security-visibility/ #artificialintelligence #securitycontrols #cybersecurity #compliance #Don'tmiss #Forescout #zerotrust #Features #Hotstuff #ITassets #network #opinion #cloud #News #IoT

Forescout for OT Security secures OT, IoT, and IT hybrid environments https://www.helpnetsecurity.com/2024/09/19/forescout-for-ot-security/ #Industrynews #Forescout

A macro look at the most pressing cybersecurity risks https://www.helpnetsecurity.com/2024/08/30/forescout-2024h1-threat-review/ #cybersecurity #cybercrime #Forescout #report #News

OpenWrt dominates, but vulnerabilities persist in OT/IoT router firmware https://www.helpnetsecurity.com/2024/08/07/ot-iot-router-firmware-vulnerabilities/ #vulnerabilityassessment #InternetofThings #FiniteState #Don'tmiss #Forescout #Hotstuff #hardware #patching #report #router #survey #News

"🔍 Blind Spots in IP Networking: A Forescout Study 🌐"

Forescout researchers shed light on overlooked vulnerabilities in the Border Gateway Protocol. A must-read for all network security enthusiasts!

Source: [Dark Reading](https://www.darkreading.com/)

Tags: #IPNetworking #Cybersecurity #Forescout #BGP #Vulnerabilities 🌐🔍