Citrix patches a new NetScaler flaw with echoes of CitrixBleed
The bulletin includes six NetScaler issues, but attention is centered on a high-severity flaw with similarities to earlier actively exploited bugs.
Advertisement
Cybersecurity and Infrastructure Security Agency (CISA)
Trump budget boss Russell Vought open to re-staffing CISA
DHS Secretary Markwayne Mullin has been floating the idea of adding back 600 CISA personnel after deep Trump administration cuts.
Inside Operation Disruption Week: Taking Down Southeast Asia’s Scam Machine
Mike Sweeney, Director of Preemptive Cyber Defense, Silent Push
Why patch directives only go so far
Six weeks of undetected access through a compromised VPN exposes why patching isn't a solution for the organizations already breached.
Malicious hackers exploit Cisco zero-day for highest access level at communications service provider
Mandiant detailed the incident in a blog post Wednesday, but it’s unclear who was behind it or if they managed to get broad visibility into the victim’s…
Open-source security is posing challenges governments can’t easily solve
A diffuse landscape, fruitful targets, companies not stepping up, AI’s influence and flagging U.S. government efforts all figure into a shifting threat.
Advertisement
Zero days, zero order: The chaos reshaping vulnerability disclosure
Gal Elbaz, co-founder and CTO of Oligo Security
Attackers hit pair of critical Fortinet vulnerabilities the vendor disclosed in April
Multiple firms have observed active exploitation of the FortiSandbox defects, and warn that the attacks originate from multiple sources, not a single campaign.
Why the autonomous SOC is the wrong goal
Mike Nichols, General Manager of Security at Elastic
CISA directive orders agencies to prioritize vulnerability patching in a new way
A vulnerability that meets all four criteria would need to be fixed within three days, for instance.