CyberAware UK Monday Briefing: Citrix NetScaler Zero-Days, Patch Tuesday Ahead, and One Thing to Do This Week
It is Monday the 28th of September and this is your week ahead briefing.
Citrix NetScaler: two zero-days under active exploitation
Security researchers have flagged two zero-day vulnerabilities in Citrix NetScaler that are already being exploited, and there is no permanent patch available yet. NetScaler is the kit larger organisations use to let staff log in to systems remotely, so this is one for IT teams at companies, hospitals, councils and universities rather than home users.
If that describes your workplace, or you use a managed IT provider, the right move today is a quick phone call. Ask whether you run Citrix NetScaler and what interim mitigations are in place. Vendors usually publish temporary workarounds while a permanent fix is being built.
Patch Tuesday is coming
Next month's Patch Tuesday is on the horizon, with the usual large batch expected from Microsoft alongside fixes from Adobe. We covered the preview last week, so just the practical point here. If your devices are set to update automatically, leave them to it. If they are not, switch that on.
Leak sites and what they mean for you
DarkWatch continues to track a busy picture, with ten active targets listed across several ransomware leak sites, including familiar names like DragonForce and LockBit alongside a newer one.
Leak sites are where criminals dump stolen data after an organisation refuses to pay. That is a serious problem for the companies involved and their customers. It is not something you can stumble across by accident, and we do not share those web addresses.
If you receive an email claiming your data was found on a leak site and urging you to click a link, treat it as a scam. Contact the organisation directly using details you find yourself.
The pattern across this week
Every week the story is the same shape in a different outfit. A flaw is exploited before a fix lands, or an old password sits unused in a breach, or someone trusts a link too quickly. The gap between risk appearing and protection arriving is where most harm happens.
One thing to do this week
Spend ten minutes turning on automatic updates for every device in your house. Your phone, your laptop, your tablet, and your router if it has the option. It is unglamorous and it is one of the most effective things a household can do.
Related reading