Security
Hey criminals! Fire an HTTP GET request. Grab system memory including session cookies issued post-authentication. Don't worry about logs. Pillage and loot. Thanks, Citrix.
Incident comes weeks after the Application Performance Monitoring firm was taken private in a $6.5 billion buyout
"Industry has gotten good at identifying vulnerabilities in the supply chain; SBOMs and so on [but not at] at insidious backdoors and logic issues that are built into software, and update mechanisms that could cause implants..."
"Loaded by default on just about every version of Windows, so it provides a broad attack surface"
You filthy animals are **** at network architecture, and it may be "necessary to expand threat hunting" says NCSC.
"Once an attacker is past the initial access, the opportunities are ample for lateral movement and privilege escalation within a cluster..."
"We operate with the assumption that a sophisticated nation state threat actor is always active inside the organisation"
Courier dispatched with a USB stick carrying trade settlement details after systems disrupted...
Incident follows record HTTP2 "Rapid Reset" attack warnings as well as CISA note on exploitation of Service Location Protocol vulnerability for DDoS purposes.