Chrome, Ivanti, and Citrix: Weekly Vulnerability Review for 1/22/24

Chrome, Ivanti, and Citrix: Weekly Vulnerability Review for 1/22/24

This week’s cybersecurity news brings attention to several vulnerabilities, including issues with GitHub credentials, a new Chrome fix, and hidden malware in pirated apps. Both Citrix and Ivanti are facing challenges with vulnerabilities in their products. The content also highlights the detection of nine vulnerabilities in an open source UEFI implementation and the discovery of … Read more

MITRE attack strikes a NERVE after Ivanti to VMware pivot

MITRE attack strikes a NERVE after Ivanti to VMware pivot

MITRE – an organisation set up to “advance national security in new ways” – was breached via a zero day in its Ivanti appliances, with private network NERVE, which hosts a “virtual development environment for all military branches and their respective weapons systems” compromised, in a potentially landmark incident for the US federal and defence … Read more