Patching Faster Has Never Been the Answer
Patching is a necessary evil and doing it manually in any decent sized organization was essentially impossible in the pre-AI times and is now pure folly.
All topics
Patching is a necessary evil and doing it manually in any decent sized organization was essentially impossible in the pre-AI times and is now pure folly.
The vendor says this is a configuration-dependent issue rather than a failure of the security patches themselves.
Today we have for you a buffet of zero days being exploited in edge security products, including Citrix and Fortinet, then we discuss the importance of communications from vendors when bad things happen, and finally we preview VulnCheck’s THREATCON1, which takes place next week.
This case is yet another reminder just how important vendor communication is in such incidents and how much uncertainty can hamper security.
On Saturday, researchers from watchTowr Labs said they had credible information that attackers were exploiting an unknown RCE vulnerability in Citrix NetScaler boxes.
This vulnerability allows for unauthenticated remote code execution and shows how a missing bounds check—a classic programming error.