Category Archives: citrix

Hackers seize on software flaw to breach two victims, despite patch availability

Posted on by

Days after researchers warned of critical vulnerabilities in popular data-management software, hackers have exploited the flaws to breach two organizations which rely on the technology. LineageOS, a free Android-based operating system, and Ghost, a nonprofit behind widely used blogging software, reported Sunday that unidentified hackers had breached their infrastructure in separate incidents. The disruptions are an example of how bugs found in widely used code often end up being exploited maliciously — even when software updates are available. Both LineageOS and Ghost rely on a tool for managing data centers and cloud-computing networks known as the Salt management framework. Cybersecurity company F-Secure reported two vulnerabilities in Salt last week which could enable attackers to execute code remotely and manipulate data. “Both of these vulnerabilities are exploitable by a remote, unauthenticated attacker,” said Rody Quinlan, a researcher at another security vendor, Tenable. Ghost said it was rebuilding its network. Customer data […]

The post Hackers seize on software flaw to breach two victims, despite patch availability appeared first on CyberScoop.

Continue reading Hackers seize on software flaw to breach two victims, despite patch availability→

Citrix App Protection enables companies to protect apps and data on unmanaged endpoints

Posted on by

When remote work moved from something a few people did on occasion to a mandate for nearly all employees, companies around the world scrambled to scale up their resources and enable it. Many fell short, leaving employees to use personal devices to acce… Continue reading Citrix App Protection enables companies to protect apps and data on unmanaged endpoints→

Citrix launches virtual series empowering employees to be and do their best while working remotely

Posted on by

It’s being touted as the “new normal.” But for most companies and their employees, remote work is anything but. To help them adapt, Citrix Systems, has launched Remote Works, a new virtual series designed to share tips and best practices for staying en… Continue reading Citrix launches virtual series empowering employees to be and do their best while working remotely→

Is remote work the new normal?

Posted on by

As COVID-19 continues to spread, remote work is no longer an experiment, but a requirement in many nations. While it represents a huge change, the results of a research conducted by OnePoll and Citrix, reveal that a majority of employees around the wor… Continue reading Is remote work the new normal?→

Chinese Hackers Exploit Cisco, Citrix Flaws in Massive Espionage Campaign

Posted on by

Researchers say that APT41’s exploits are part of one of the broadest espionage campaigns they’ve seen from a Chinese-linked actor “in recent years.” Continue reading Chinese Hackers Exploit Cisco, Citrix Flaws in Massive Espionage Campaign→

Chinese hackers hit Citrix, Cisco vulnerabilities in sweeping campaign

Posted on by

Earlier this year, state-backed Chinese hackers embarked on one of the most sweeping Chinese espionage campaigns FireEye has seen in years, according to new research the security firm published Wednesday. The campaign, which lasted between January 20 and March 11, targeted 75 organizations ranging in nearly every economic sector: telecommunications, healthcare, government, defense, finance, petrochemical, manufacturing, and transportation. The campaign, believed to be run by APT41, targeted nonprofit, legal, real estate, travel, education, and media organizations as well. “This activity is one of the most widespread campaigns we have seen from China-nexus espionage actors in recent years,” researchers Christopher Glyer, Dan Perez, Sarah Jones, and Steve Miller said. “While APT41 has previously conducted activity with an extensive initial entry … this scanning and exploitation has focused on a subset of our customers, and seems to reveal a high operational tempo and wide collection requirements for APT41.” APT41 zeroed in on victims […]

The post Chinese hackers hit Citrix, Cisco vulnerabilities in sweeping campaign appeared first on CyberScoop.

Continue reading Chinese hackers hit Citrix, Cisco vulnerabilities in sweeping campaign→

IoC Scanner shows if Citrix appliances have been compromised via CVE-2019-19781

Posted on by

Citrix and FireEye have teamed up to provide sysadmins with an IoC scanner that shows whether a Citrix ADC, Gateway or SD-WAN WANOP appliance has been compromised via CVE-2019-19781. Finding evidence of compromise By now it should be widely known that … Continue reading IoC Scanner shows if Citrix appliances have been compromised via CVE-2019-19781→