Tag: citrix
-
Citrix acquisitions poised to enhance zero-trust security
First seen on scworld.com Jump to article: www.scworld.com/brief/citrix-acquisitions-poised-to-enhance-zero-trust-security
-
Citrix NetScaler devices targeted with password spraying attacks
First seen on scworld.com Jump to article: www.scworld.com/brief/citrix-netscaler-devices-targeted-with-password-spraying-attacks
-
Citrix Warns of Password Spraying Attacks Targeting NetScaler Appliances
Citrix issues warning on password spraying attacks targeting NetScaler and NetScaler Gateway appliances deployed by organizations worldwide. The post Citrix Warns of Password Spraying Attacks Targeting NetScaler Appliances appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/citrix-warns-of-password-spraying-attacks-targeting-netscaler-appliances/
-
Angriffe auf Citrix Netscaler Gateway: Hersteller gibt Hinweise zum Schutz
Seit Dezember 2024 gibt es ja massiven Angriffswellen Citrix Netscaler Gateways. Ich hatte im Blog gewarnt und das BSI hat im Nachgang ebenfalls eine Warnung veröffentlicht. Nun hat Citrix reagiert, und gibt Tipps, wie sich Netscaler Gateways gegen die Angriffe … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/12/15/angriffe-auf-citrix-netscaler-gateway-hersteller-gibt-hinweise-zum-schutz/
-
Citrix Alerts on Global Password Spraying Campaigns Targeting NetScaler Appliances
Citrix has issued an advisory highlighting an increase in password spraying attacks aimed at NetScaler appliances worldwide. These attacks exploit authentication endpoints, causing significant operational disruptions for targeted organizations. Unlike... First seen on securityonline.info Jump to article: securityonline.info/citrix-alerts-on-global-password-spraying-campaigns-targeting-netscaler-appliances/
-
Citrix shares mitigations for ongoing Netscaler password spray attacks
Citrix Netscaler is the latest target in widespread password spray attacks targeting edge networking devices and cloud platforms this year to breach corporate networks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/citrix-shares-mitigations-for-ongoing-netscaler-password-spray-attacks/
-
Citrix NetScaler Under Siege: Significant Increase in Brute Force Attacks Observed
A significant increase in brute-force attacks targeting outdated and misconfigured Citrix NetScaler devices has been observed in Germany, prompting warnings from cybersecurity experts and organizations, including CERT Germany and the... First seen on securityonline.info Jump to article: securityonline.info/citrix-netscaler-under-siege-significant-increase-in-brute-force-attacks-observed/
-
NY Health Group Fined $550K in Unpatched Vulnerability Hack
AG Says HealthAlliance Tried But Failed to Fix Zero-Day Flaw That Led to Exploit. New York State has levied a $550,000 fine against a healthcare group that tried – but failed – to patch a critical zero-day vulnerability in a Citrix NetScaler appliance used for telemedicine. Hackers exploited the flaw, stealing 196 gigabytes of data…
-
Security researchers find deep flaws in CVSS vulnerability scoring system
The industrywide method for assessing the severity of vulnerabilities in software and hardware needs to be revised because it provides potential misleading severity assessment, delegates at Black Hat Europe were told Thursday.The Common Vulnerability Scoring System (CVSS) makes use of various metrics to quantify vulnerability severity. A presentation at Black Hat by cybersecurity experts from…
-
Citrix goes shopping in Europe and returns with gifts for security-conscious customers
Tags: citrixAcquires two companies that help those on the nice list keep naughty list types at bay First seen on theregister.com Jump to article: www.theregister.com/2024/12/12/citrix_acquires_devicetrust_strong_network/
-
Citrix NetScaler devices targeted in brute force campaign
Tags: citrixCitrix advised NetScaler customers to ensure that their devices are fully updated and properly configured to defend against the recent spike in brute force attacks. First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366617152/Citrix-NetScaler-devices-targeted-in-brute-force-campaign
-
Citrix Acquisitions Boost Zero-Trust Defense for Hybrid Work
deviceTrust, Strong Network Acquisitions Improve Zero Trust, Developer Protections. Citrix enhances its security for hybrid work by acquiring deviceTrust and Strong Network. Purchasing these European startups boosts protection for VDI, DaaS and cloud development, empowering organizations to enforce zero-trust principles and reduce risks across their hybrid environments. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/citrix-acquisitions-boost-zero-trust-defense-for-hybrid-work-a-27019
-
BSI warnt nun auch vor massiver Angriffswelle auf Citrix Netscaler Gateways (Dez. 2024)
Vor einigen Tagen hatte ich hier im Blog vor einer massiven Welle von Angriffsversuchen auf Citrix Netscaler Gateways im Einsatz seit ca. 5. Dez. 2024 gewarnt. Eine Leser haben das bestätigt, andere als “nichts neues” abgetan. Nun warnt auch das … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/12/10/bsi-warnt-nun-auch-vor-massiver-angriffswelle-auf-citrix-netscaler-gateways/
-
Massive Angriffswelle auf Citrix Netscaler Gateways (5.12.2024)?
Tags: citrixKurze Frage bzw. Information an die Leserschaft des Blogs, die Citrix Netscaler Gateways im Einsatz haben. Konntet ihr am gestrigen Abend eine massive Zunahme der Angriffsversuche auf diese Instanzen beobachten. Ein Blog-Leser hat mich gerade über eine entsprechende Beobachtung per … First seen on borncity.com Jump to article: www.borncity.com/blog/2024/12/06/massive-angriffswelle-auf-citrix-netscaler-gateways-5-12-2024/
-
Active exploitation of Citrix ADC and Gateway Critical Remote Code Execution Vulnerability by Suspected Chinese APT5 (CVE-2022-27518)
Written by Harish Segar of the Kudelski Security Threat Detection & Research Team Summary On December 13, 2022, The U.S. National Security Agency … First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2022/12/15/advisory-active-exploitation-of-citrix-adc-and-gateway-critical-remote-code-execution-vulnerability-by-suspected-chinese-apt5/
-
Citrix ADC/Gateway Triple Threat
Written by Eric Dodge and Harish Segar of the Kudelski Security Threat Detection & Research Team Summary Citrix recently released a handful of vul… First seen on research.kudelskisecurity.com Jump to article: research.kudelskisecurity.com/2023/07/18/citrix-adc-gateway-triple-threat/
-
Angriffe auf Citrix-Sicherheitslücke beobachtet
In der vergangenen Woche hat Citrix Sicherheitslücken im Session Recording geschlossen. Nun haben IT-Forscher Angriffe darauf beobachtet. First seen on heise.de Jump to article: www.heise.de/news/Angriffe-auf-Citrix-Sicherheitsluecke-beobachtet-10100614.html
-
Exploitation Attempts Target Citrix Session Recording Vulnerabilities
Exploitation attempts seen for two recently patched Citrix Session Recording vulnerabilities tracked as CVE-2024-8068 and CVE-2024-8069. The post Exploitation Attempts Target Citrix Session Recording Vulnerabilities appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/exploitation-attempts-target-citrix-session-recording-vulnerabilities/
-
Citrix Virtual Apps Desktops Zero-Day Vulnerability Exploited in the Wild
A critical new vulnerability has been discovered in Citrix’s Virtual Apps and Desktops solution, which is widely used to facilitate secure remote access to desktop applications now exploited in the wild. The vulnerability, which remains unpatched, was detailed last week by Watchtowr Labs in a blog post . This flaw poses a significant threat, as…
-
Citrix Session Recording users warned of CVEs that allow hackers to gain control
Security researchers at watchTowr discovered the flaw and claim attackers can gain access without authentication, a finding which Citrix disputes. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/citrix-session-recording-cves-hackers/732794/
-
Zero-Days Win the Prize for Most Exploited Vulns
Among the top exploited zero-day vulnerabilities were bugs found in systems from Citrix and Cisco. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/zero-days-wins-superlative-most-exploited-vulns
-
Citrix, watchTowr clash on new RCE-enabling Citrix Virtual Apps and Desktops flaws
First seen on scworld.com Jump to article: www.scworld.com/brief/citrix-watchtowr-clash-on-new-rce-enabling-citrix-virtual-apps-and-desktops-flaws
-
Citrix Patches Zero-Day Recording Manager Bugs
There is some disagreement over whether the remote code execution (RCE) security flaws allow for unauthenticated exploitation or not. Citrix says no, but researchers say the company is downplaying a good old unauthenticated RCE. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/citrix-patches-zero-day-recording-manager-bugs
-
Zero-days from top security vendors were most exploited CVEs in 2023
The top five vulnerabilities exploited by attackers last were found in security gear from Citrix, Cisco and Fortinet, the Five Eyes’ cyber agencies found. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/security-vendors-zero-days-top-cve-exploits/732814/
-
Citrix, Cisco, Fortinet Zero-Days Among 2023’s Most Exploited Vulnerabilities
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36592/Citrix-Cisco-Fortinet-Zero-Days-Among-2023s-Most-Exploited-Vulnerabilities.html
-
Citrix, Cisco, Fortinet Zero-Days Among 2023s Most Exploited Vulnerabilities
Most of the top frequently exploited vulnerabilities in 2023 were initially exploited as zero-days, according to data from government agencies. The post Citrix, Cisco, Fortinet Zero-Days Among 2023s Most Exploited Vulnerabilities appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/citrix-cisco-fortinet-zero-days-among-2023s-most-exploited-vulnerabilities/
-
Citrix schließt Sicherheitslücken in Netscaler ADC und Gateway und weitere
Citrix hat Sicherheitsupdates zum Ausbessern von Schwachstellen in Netscaler ADC, Gateway und Session Recording herausgegeben. First seen on heise.de Jump to article: www.heise.de/news/Citrix-stopft-Sicherheitslecks-in-Netscaler-ADC-und-Gateway-und-weitere-10029622.html
-
Citrix, Fortinet Patch High-Severity Vulnerabilities
Citrix and Fortinet have released patches for multiple vulnerabilities, including high-severity bugs in NetScaler and FortiOS. The post Citrix, Fortinet Patch High-Severity Vulnerabilities appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/citrix-fortinet-patch-high-severity-vulnerabilities/
-
Citrix stopft Sicherheitslecks in Netscaler ADC und Gateway und weitere
Citrix hat Sicherheitsupdates zum Ausbessern von Schwachstellen in Netscaler ADC, Gateway und Session Recording herausgegeben. First seen on heise.de Jump to article: www.heise.de/news/Citrix-stopft-Sicherheitslecks-in-Netscaler-ADC-und-Gateway-und-weitere-10029622.html