CISA warns of active exploitation of critical ‘Citrix Bleed 2’ security flaw

Bitcoin reaches new all-time high of over $118,000 within 24 hours

Bitcoin reached a new all-time high of $118,900 on Friday, surpassing its previous record of $113,822 set on Thursday. As Read more

Conveyor Revolutionizes Vendor Security Reviews and RFPs with AI

Selling software to companies can be a daunting task, especially when it comes to meeting security requirements. Chas Ballew, founder Read more

Ready-made Stem Cell Therapies in Development for Pets

Earlier this week, San Diego startup Gallant announced $18 million in funding to bring the first FDA-approved ready-to-use stem cell Read more

Elon Musk’s Dodgy Election Claims Have Gone Viral with 2 Billion Views on X

The world’s richest man buys out one of the most popular social media platforms and uses it as a propaganda Read more

The U.S. cybersecurity agency CISA has issued a warning that hackers are actively exploiting a critical-rated security flaw in a popular Citrix product. This flaw, dubbed “Citrix Bleed 2” by security researchers, is similar to a previous 2023 security vulnerability in Citrix NetScaler. Like its predecessor, Citrix Bleed 2 can be remotely exploited to extract sensitive credentials from affected devices, potentially giving hackers broader access to a company’s network.

CISA has evidence that this bug is being actively used in hacking campaigns, with reports of hacks dating back to mid-June. Following the publication of details about the NetScaler exploit, Akamai noted a significant increase in scanning efforts to find vulnerable devices. Recognizing the severity of the situation, CISA has ordered federal government agencies to patch any Citrix device affected by the bug by Friday.

See also  Microsoft AI Chief Warns Against Studying AI Consciousness

While Citrix has not acknowledged the exploitation of this vulnerability, the company’s security advisory advises customers to update affected devices promptly. Despite requests for comment, Citrix representatives have not responded to inquiries from TechCrunch.

Mark Zuckerberg done apologizing

Slate Auto: The Inside Scoop on Bezos-Backed EV Startup