Citrix fixes 2 Critical ADM vulnerabilities (CVE-2022-27511 and CVE-2022-27512)
Citrix has fixed two Critical Application Delivery Management (ADM) vulnerabilities (CVE-2022-27511 and CVE-2022-27512).
Citrix
PRC state-sponsored cyber actors routinely exploit these 16 network device vulnerabilities
The FBI, NSA and CISA coauthored a joint Cybersecurity Advisory detailing how People’s Republic of China (PRC) state-sponsored cyber actors continue to exploit publicly known vulnerabilities to gain access to a broad network of compromised infrastructure.
Citrix addresses 4 Hypervisor vulnerabilities
Citrix has issued a security update for Citrix Hypervisor vulnerabilities, that may each allow privileged code in a guest VM to cause the host to crash or become unresponsive.
Citrix addresses vulnerability (CVE-2022-21825) in Workspace App for Linux
Citrix has addressed a vulnerability in Workspace App for Linux that could result in elevation of privileges as root.
Citrix addresses Critical DoS vulnerability in ADC and Citrix Gateway products
Citrix has addressed a Critical unauthenticated denial of service (DoS) vulnerability CVE-2021-22955 in ADC and Citrix Gateway products.
Citrix Hypervisor security updates
Citrix has issued a security update for Citrix Hypervisor vulnerabilities, that may collectively allow an attacker to launch privileged code in a guest VM to compromise or crash the host.
Top 30 most commonly exploited vulnerabilities over 2020 and 2021
Cybersecurity experts from Australia, U.K., and U.S. governments have released a list of the most commonly exploited vulnerabilities over 2020 and 2021.
Citrix patches privileged escalation vulnerability in Virtual Apps and Desktops
Citrix has patched a vulnerability (CVE-2021-22928) in Virtual Apps and Desktops that could result in privilege escalation on a Windows Virtual Delivery Agent (VDA).
Citrix fixes 3 Hypervisor vulnerabilities
Citrix has released patches for Citrix Hypervisor that address two vulnerabilities. If exploited, an attacker could exploit privileged code in a guest VM and cause the host to crash or become unresponsive.
APT actors exploit legacy internet-facing vulnerabilities in combination with Zerologon to target organizations
Advanced persistent threat actors (APTs) are exploiting multiple legacy vulnerabilities in combination with newer “Zerologon” to target government networks, critical infrastructure, and elections organizations.