Forescout

Specialist investigators are now trying to work out who was behind this.

Daniel Dos Santos is from the cyber security company Forescout.

We definitely should be worried about this happening again.

So we definitely need food retailers to take action and take those devices offline or enable them to be accessed remotely in a secure way.

And the delivery mechanism leading up to that execution is just a masterclass in social engineering mixed with technical evasion.

Yeah, the researchers at Huntress Labs and Forescout piece this whole attack chain together.

It's wild.

It actually starts with attackers setting up malicious chat GPT custom GPTs.

Microsoft, though, concedes the takedown puts only a dent in the broader phishing ecosystem.

Forescout's Vadir Lab says it has uncovered Romulus, a new platform that serves multiple malware payloads through click-fix lures.

Researchers found it while investigating an incident on a server hosting a login panel with a shield icon and the Romulus name.

They've since identified six IP addresses running the same panel.

It tracked unique installs and total runs with a live counter, a 14-day timeline, and a breakdown by country.

Somebody, somewhere, is measuring campaign performance against targets.

Forescout traced two delivery routes through the platform.

The first serves a trojanized Stardock installer that sideloads malware through a patched DLL.

Red Hat also opened its Lightwell clearing house to all customers, giving them one place to see which patches are ready to deploy.

Researchers at Forescout found that only six percent of Internet-connected medical devices and sixteen percent of medical operational technology can support post-quantum cryptography, the encryption meant to resist future quantum computers.

Because this equipment often stays in service for decades, much of it may age out long before it can make that switch.

That's your cyber briefing for today, and you'll find links to every story in the show notes.

...

A or ForeScout, take your pick.

But, but IAST is way more common than ForeScout.

Yeah.

So, well, then I think that you'd have to gauge the threat depending on what your actual exposure looks like.