Slashdot Mirror
Citrix Discloses Security Breach of Internal Network (zdnet.com)
Citrix disclosed today a security breach during which hackers accessed the company's internal network. In a short statement posted on its blog, Citrix Chief Security Information Officer Stan Black said Citrix found out about the hack from the FBI earlier this week. From a report: "On March 6, 2019, the FBI contacted Citrix to advise they had reason to believe that international cyber criminals gained access to the internal Citrix network," Black said. "While not confirmed, the FBI has advised that the hackers likely used a tactic known as password spraying, a technique that exploits weak passwords. Once they gained a foothold with limited access, they worked to circumvent additional layers of security," the Citrix exec added. Black said hackers accessed and downloaded business documents, but Citrix wasn't able to identify what specific documents had been stolen at the time of his announcement today.
I know Citrix is a godsend for people who have to deal with Software Deployment and updates. But it is really just a gross hack to make software accessible over the network that were never designed to be such. On most Citrix Setups I am able to get more access to apps that I wasn't given permission for. Mostly due to the fact that Windows security wasn't designed for Citrix in mind. A right click here, view file path, or a help file that opens IE. I now have access to applications on the server that I wasn't really meant to have.
If you think Citrix is a good idea, then you probably should be looking at different software, such as more Web Based (HTML) Application. Because you will be better off.
If something is so important that you feel the need to post it on the internet... It probably isn't that important.