Poor Network Segmentation Increases Corporate Risk, Report Finds
A Forescout report says that almost half of corporate network segments containing operational technology or medical devices also include IT and IoT devices, making it easier for attackers to move laterally across systems. The analysis of 47,700 segments found that mixing device types broadens attack surfaces. Forescout warns that poorly separated devices, such as IP cameras sharing networks with workstations, have already been exploited by threat groups.
- Forescout analyzed 47,700 network segments worldwide
- Nearly half of OT/IoMT networks include IT or IoT devices
- Mixed segments expand attack opportunities for intruders
- Forescout tracked over 300 attacks exploiting poor segmentation
- Pro-Russian group cited as exploiting exposed device segments
Sources covering this
More in Cybersecurity
Security startup Hacktron exploits vulnerability in OpenAI forum
Hacktron, an AI cybersecurity startup, found and exploited a security flaw in OpenAI's community forum that allowed access to an employee's internal account using Anthropic's Claude. The breach relied on an image processing vulnerability and was executed in less than 72 hours. Hacktron stopped short of accessing internal code and reported the issue to OpenAI, which then revoked affected tokens. Hacktron received a $6,500 bounty for the discovery.
Microsoft dismantles AI-driven EvilTokens cybercrime platform
Microsoft and partners have taken down EvilTokens, an AI-powered cybercrime platform allegedly used by about 1,000 cybercriminals to compromise over 12,000 Microsoft user email inboxes worldwide. On September 15, Microsoft seized 50 EvilTokens-operated websites and disabled more than 175 related domains. Authorities have arrested two suspects in London accused of fraud and money laundering linked to the platform. At least $1.7 million in losses are tied to EvilTokens.
Microsoft releases record number of security patches
Microsoft released updates to fix at least 974 security vulnerabilities across Windows and other products, its largest patch release to date. The update includes critical flaws, some already being exploited, and over 100 rated as dangers that could let attackers seize control of systems. The unprecedented volume is partly due to the use of AI for vulnerability detection, but experts warn that rapid growth complicates efforts to test and deploy fixes.
Microsoft releases record September patch for Windows
Microsoft issued its largest-ever security update for Windows, addressing over 960 vulnerabilities in its September release. More than 100 of these flaws are rated critical, and at least two are actively exploited. Several issues from previous updates, including failures in Microsoft Teams and Outlook on ARM devices, have been resolved. The volume of fixes is part of an industry-wide trend linked to increased use of AI for identifying software vulnerabilities.