NSA says hackers are targeting Citrix networking gear

Share post:

A U.S. National Security Agency update has disclosed the activity of APT5, a presumed Chinese hacking group, which is looking to exploit a vulnerability in networking gear from U.S. technology company Citrix Systems Inc to spy on targets. It also asked that victims who find additional evidence of a cyber attack contact the NSA’s Cybersecurity Collaboration Center.

According to the agency’s notice, a group known as Advanced Persistent Threat 5, or APT5, a security designation for a Chinese state-backed hacking group known to target telecommunications companies, is operating against a Citrix software known as application delivery controllers (ADCs). Citrix ADC targeting can “facilitate illegitimate access to targeted organizations by bypassing normal authentication controls,” according to the agency.

Meanwhile, Citrix issued software patches to its customers on Tuesday to address what analysts call a “zero-day” security flaw in its software that, if left unpatched, could be exploited by Chinese hackers to gain unauthorized computer network access.

Citrix said “a vulnerability has been discovered in Citrix Gateway and Citrix ADC … that, if exploited, could allow an unauthenticated remote attacker to perform arbitrary code execution on the appliance.”

The sources for this piece include an article in Reuters.



Related articles

Microsoft announces enhanced security feature for OneNote

Microsoft has released further information on the increased security measures it is deploying for OneNote in order to...

Russian hacker group steals Emails of NATO officials and diplomats

Since February 2023, a Russian hacking gang known as TA473 or 'Winter Vivern' has targeted unpatched Zimbra endpoints...

Canadian cybersecurity accelerator counts its accomplishments

A Canadian university-associated business accelerator for helping early-stage cybersecurity companies says its first two years of operation have been more than satisfactory. The Rogers Cybersecure Catalyst Accelerator has had “an incredible impact” on Canadian cybersecurity entrepreneurs and founders, executive director Charles Finlay said this week in the first report on the program’s progress. Despite having

Crackdown on ransomware gangs yet to show an impact: OpenText

In its annual cybersecurity report OpenText also looked at malware, phishing and infec

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways