Perils in the Periphery: A 2024 H1 Threat Review

In the first half of 2024, Forescout Research – Vedere Labs published a diverse range of blog posts and reports analyzing prominent vulnerabilities, threat actors and ransomware.

Our data shows state-sponsored actors are using hacktivist persona and are targeting VPN vulnerabilities as entry points. Attackers have shifted from managed endpoints to the unmanaged perimeter for initial access and impact. Network infrastructure and other high-risk unmanaged devices are becoming more attractive targets due to the challenges in detecting and investigating these attacks, primarily due to a lack of network visibility and security telemetry from these devices. It is crucial to proactively secure them.

This report reviews the period between January 1 and July1 31, 2024 (2024H1) highlighting the evolution of the threat landscape as compared with 2023H1.