If your network sits behind Check Point equipment, this is a patching week: CISA has added a flaw in it to its list of bugs attackers are already using. Citrix shipped fixes for a dozen flaws in its NetScaler products, and one of them lets someone in without a valid login. The Hacker News reports new exploits against on-premise N-central servers from N-able that work even on servers already patched. Keeping up with security news protects you less than being able to say today what you run, who updates it, and when a backup was last restored for real, not just taken. That last part is the one people skip. If you'd rather someone else made that pass over your account and payment flows, send us a short description of your setup and we'll come back within a day with what we'd check first and what it would cost.
Was this useful?