Tag: citrix
-
Citrix, Cisco, Fortinet Zero-Days Among 2023’s Most Exploited Vulnerabilities
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36592/Citrix-Cisco-Fortinet-Zero-Days-Among-2023s-Most-Exploited-Vulnerabilities.html
-
Citrix, Cisco, Fortinet Zero-Days Among 2023s Most Exploited Vulnerabilities
Most of the top frequently exploited vulnerabilities in 2023 were initially exploited as zero-days, according to data from government agencies. The post Citrix, Cisco, Fortinet Zero-Days Among 2023s Most Exploited Vulnerabilities appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/citrix-cisco-fortinet-zero-days-among-2023s-most-exploited-vulnerabilities/
-
Citrix schließt Sicherheitslücken in Netscaler ADC und Gateway und weitere
Citrix hat Sicherheitsupdates zum Ausbessern von Schwachstellen in Netscaler ADC, Gateway und Session Recording herausgegeben. First seen on heise.de Jump to article: www.heise.de/news/Citrix-stopft-Sicherheitslecks-in-Netscaler-ADC-und-Gateway-und-weitere-10029622.html
-
Citrix, Fortinet Patch High-Severity Vulnerabilities
Citrix and Fortinet have released patches for multiple vulnerabilities, including high-severity bugs in NetScaler and FortiOS. The post Citrix, Fortinet Patch High-Severity Vulnerabilities appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/citrix-fortinet-patch-high-severity-vulnerabilities/
-
Citrix stopft Sicherheitslecks in Netscaler ADC und Gateway und weitere
Citrix hat Sicherheitsupdates zum Ausbessern von Schwachstellen in Netscaler ADC, Gateway und Session Recording herausgegeben. First seen on heise.de Jump to article: www.heise.de/news/Citrix-stopft-Sicherheitslecks-in-Netscaler-ADC-und-Gateway-und-weitere-10029622.html
-
Citrix Issues Patches for Zero-Day Recording Manager Bugs
There is some disagreement over whether the remote code execution (RCE) security flaws allow for unauthenticated exploitation or not. Citrix says no, but researchers say the company is downplaying a good old unauthenticated RCE. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/citrix-patches-zero-day-recording-manager-bugs
-
Citrix ‘Recording Manager’ Zero-Day Bug Allows Unauthenticated RCE
The security vulnerability is due to an exposed Microsoft Message Queuing (MSMQ) instance and the use of the insecure BinaryFormatter. First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/citrix-recording-manager-zero-day-bug-unauthenticated-rce
-
HTTP your way into Citrix’s Virtual Apps and Desktops with fresh exploit code
‘Once again, we’ve lost a little more faith in the internet,’ researcher says First seen on theregister.com Jump to article: www.theregister.com/2024/11/12/http_citrix_vuln/
-
New Flaws in Citrix Virtual Apps Enable RCE Attacks via MSMQ Misconfiguration
Cybersecurity researchers have disclosed new security flaws impacting Citrix Virtual Apps and Desktop that could be exploited to achieve unauthenticated remote code execution (RCE)The issue, per findings from watchTowr, is rooted in the Session Recording component that allows system administrators to capture user activity, and record keyboard and mouse input, along with a video stream…
-
New Citrix Zero-Day Vulnerability Allows Remote Code Execution
watchTowr has found a flaw in Citrix’s Session Recording Manager that can be exploited to enable unauthenticated RCE against Citrix Virtual Apps and Desktops First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/new-citrix-zeroday-vulnerability/
-
Citrix Boosts Security for Remote Application Accesses With More Security Layers
Connections on the internet are not secure by default, and bad actors frequently take advantage of users accessing organizations’ applications and res… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/citrix-boosts-security-for-remote-application-accesses-with-more-security-layers/
-
Iranian Hackers Target Microsoft 365, Citrix Systems with MFA Push Bombing
Iranian hackers are targeting critical infrastructure organizations with brute force tactics. This article explores their techniques, including MFA…… First seen on hackread.com Jump to article: hackread.com/iranian-hackers-target-microsoft-365-mfa-push-bombing/
-
Citrix Workspace App für Windows ermöglicht Rechteausweitung
First seen on heise.de Jump to article: www.heise.de/news/Citrix-Workspace-App-fuer-Windows-ermoeglicht-Rechteausweitung-9864320.html
-
Citrix Workspace App Vulnerable to Privilege Escalation Attacks
Citrix released a security bulletin (CTX691485) detailing two critical vulnerabilities in the Citrix Workspace app for Windows. These vulnerabilities,… First seen on gbhackers.com Jump to article: gbhackers.com/citrix-workspace-app-vulnerable/
-
New ManticoraLoader Malware Attacking Citrix Users To Steal Data
Cyble Research & Intelligence Labs has recently found information about a new type of malware-as-a-service (MaaS) called ‘ManticoraLoader’ in some… First seen on gbhackers.com Jump to article: gbhackers.com/manticoraloader-malware-attacking-citrix-users/
-
Channel Brief: Arrow, Citrix Sign Distribution Agreement for Smaller Partners, Sumo Logic Teams With AWS on Cybersecurity
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/channel-brief-thursday-2
-
Citrix bringt Updates für NetScaler Console und Co. Updates schließen zahlreiche kritische Sicherheitslücken
First seen on security-insider.de Jump to article: www.security-insider.de/citrix-sicherheitsluecken-updates-a-2e6dc64d21b230224a8ef5123440235e/
-
Citrix Warns of Critical NetScaler Console Flaw
First seen on duo.com Jump to article: duo.com/decipher/citrix-warns-of-critical-netscaler-console-flaw
-
Citrix stopft teils kritische Sicherheitslücken in mehreren Produkten
Tags: citrixFirst seen on heise.de Jump to article: www.heise.de/news/Citrix-stopft-teils-kritische-Sicherheitsluecken-in-mehreren-Produkten-9795655.html
-
Channel Brief: Cytactic Launches Cyberattack Readiness Platform, Parallels Offers Promo for Citrix Migration
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/channel-brief-cytactic-launches-cyberattack-readiness-platform
-
Citrix fixed critical and high-severity bugs in NetScaler product
IT giant Citrix addressed multiple vulnerabilities, including critical and high-severity issues in its NetScaler product. Citrix released security upd… First seen on securityaffairs.com Jump to article: securityaffairs.com/165553/security/citrix-fixed-netscaler-flaw.html
-
Citrix Patches Critical NetScaler Console Vulnerability
Citrix rolls out patches for multiple security vulnerabilities, including critical and high-severity issues in the NetScaler product line. The post Ci… First seen on securityweek.com Jump to article: www.securityweek.com/citrix-patches-critical-netscaler-console-vulnerability/
-
Change Healthcare breached via Citrix portal with no MFA
UnitedHealth Group CEO Andrew Witty’s opening statement for Wednesday’s congressional hearing shed more light on the ransomware attack against Change … First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366582824/Change-Healthcare-breached-via-Citrix-portal-with-no-MFA
-
Vulnerability Recap 5/13/24 F5, Citrix Chrome
First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/vulnerability-recap-may-13-2024/
-
Admins müssen selbst handeln: PuTTY-Sicherheitslücke bedroht Citrix Hypervisor
First seen on heise.de Jump to article: www.heise.de/news/Admins-muessen-selbst-handeln-PuTTY-Sicherheitsluecke-bedroht-Citrix-Hypervisor-9713898.html
-
Citrix Addresses High-Severity Flaw in NetScaler ADC and Gateway
First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/citrix-addresses-high-severity-flaw-in-netscaler-adc-and-gateway
-
Citrix warns customers to update PuTTY version installed on their XenCenter system manually
Citrix urges customers to manually address a PuTTY SSH client flaw that could allow attackers to steal a XenCenter admin’s private SSH key. Versions o… First seen on securityaffairs.com Jump to article: securityaffairs.com/162953/security/citrix-manually-update-putty-ssh-client.html
-
Citrix warns admins to manually mitigate PuTTY SSH client bug
Citrix notified customers this week to manually mitigate a PuTTY SSH client vulnerability that could allow attackers to steal a XenCenter admin’s priv… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/citrix-warns-admins-to-manually-mitigate-putty-ssh-client-bug/
-
UnitedHealth Congressional Testimony Reveals Rampant Security Fails
The breach was carried out with stolen Citrix credentials for an account that lacked multifactor authentication. Attackers went undetected for days, a… First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/unitedhealth-congressional-testimony-rampant-security-fails
-
Citrix NetScaler ADC Gateway Flaw Lets Attackers Obtain Sensitive Data Remotely
A security vulnerability has been identified in Citrix NetScaler ADC and Gateway appliances, allowing remote attackers to access sensitive data withou… First seen on gbhackers.com Jump to article: gbhackers.com/citrix-netscaler-adc-gateway-flaw/