Page 7 - Shadowserver Foundation News Today

A threat actor has compromised close to 2,000 thousand Citrix NetScaler servers in a massive campaign exploiting the critical-severity remote code execution tracked as CVE-2023-3519.

Many organizations have failed to patch a critical zero-day vulnerability, allowing hackers to install Web shells on hundreds of endpoints.

Hundreds of Citrix Netscaler ADC and Gateway servers have already been breached and backdoored in a series of attacks targeting a critical remote code execution (RCE) vulnerability tracked as CVE-2023-3519.

Researchers have revealed new details about "Decoy Dog", a sophisticated toolkit discovered in April 2023 that has observed activity largely in Russia and Eastern Europe.

Citrix NetScaler appliances are at risk via the same flaw adversaries used to steal Active Directory data from a critical infrastructure organization in June.

Thousands of organizations could be at risk from a Citrix zero-day that hackers have already abused to target U.S. critical infrastructure.

Multiple Zyxel firewall devices unpatched against the critical vulnerability, tracked as CVE-2023-28771, have been targeted by numerous distributed denial-of-service botnets, including the Mirai-based Dark.IoT and novel Katana botnets, reports The Hacker News.

Citrix NetScaler appliances are at risk via the same flaw adversaries used to steal Active Directory data from a critical infrastructure organization in June.

IT teams are super slow at patching, putting their endpoints at serious risk.

Rivian Automotive, Inc. today announced it has hired Mike Johnson as its Chief Information Security Officer . Johnson joins Rivian from Fastly where he was CISO for over 3 years, securing the... | June 20, 2023