Security Boulevard

Is there really a cybersecurity talent shortage, or are we just looking in all the wrong places? This week on the Shared Security Podcast, we tackle the buzz around the so-called cybersecurity skills gap. Host Tom Eston welcomes Katie Soper, Senior Consultant at Avetix Cyber and co-founder of the CyberVault Podcast, to discuss the challenges […]

The post Cybersecurity Talent Shortage: Myth, Mismatch, or Reality? appeared first on Shared Security Podcast.

The post Cybersecurity Talent Shortage: Myth, Mismatch, or Reality? appeared first on Security Boulevard.

Learn how Managed Security Service Provide S-IT partnered with PowerDMARC to automate and simplify email authentication management for clients.

The post DMARC MSP Case Study: How S-IT Automated Email Authentication Management with PowerDMARC appeared first on Security Boulevard.

PowerDMARC has been named Grid Leader in DMARC Software in the G2 Summer 2025 Reports!

The post PowerDMARC Dominates G2 Summer Reports 2025 in the DMARC Software Category appeared first on Security Boulevard.

Are Your Non-Human Identities (NHIs) Defended Robustly Against Cyber Threats? Ever questioned the absolute security of your machine identities? With the rising interconnectedness of technologies, protection of Non-Human Identities (NHIs) is no longer a choice but an urgent necessity. Ensuring robust cybersecurity can be a daunting task, given the sophistication of modern digital threats. But […]

The post Are Your NHIs Fully Protected? appeared first on Entro.

The post Are Your NHIs Fully Protected? appeared first on Security Boulevard.

How Important Is Proactive NHI Management? Have you ever considered the significance of proactive Non-Human Identity (NHI) management in securing your cloud? With companies become more digitally reliant, managing machine identities and their secrets has evolved into an essential part of corporate strategy. This proactive approach to NHI management offers several advantages, including risk reduction, […]

The post Being Proactive with Your NHIs Management appeared first on Entro.

The post Being Proactive with Your NHIs Management appeared first on Security Boulevard.

Is Your Cloud Environment as Secure as You Think? Managing Non-Human Identities (NHIs) and Secrets is a critical concern. This is especially true for organizations making use of cloud environments, where threats often lurk undetected and unrecognized. But have you considered how innovative NHI management could transform your company’s approach to security? The ingenuity of […]

The post Innovating NHIs Management for Better Security appeared first on Entro.

The post Innovating NHIs Management for Better Security appeared first on Security Boulevard.

Our sincere appreciation to LinuxFest Northwest (Now Celebrating Their Organizational 25th Anniversary Of Community Excellence), and the Presenters/Authors for publishing their superb LinuxFest Northwest 2025 video content. Originating from the conference’s events located at the Bellingham Technical College in Bellingham, Washington; and via the organizations YouTube channel.

Thanks and a Tip O' The Hat to Verification Labs :: Penetration Testing Specialists :: Trey Blalock GCTI, GWAPT, GCFA, GPEN, GPCS, GCPN, CRISC, CISA, CISM, CISSP, SSCP, CDPSE for recommending and appearing as speaker at the LinuxFest Northwest conference.

Permalink

The post LinuxFest Northwest: Lightning Talks appeared first on Security Boulevard.

Scientists with NIST and the University of Colorado Boulder developed CURBy, a system that can verify the randomness of strings of numbers, which will add more protection to encrypted data in the coming era of quantum computing.

The post NIST’s CURBy Uses Quantum to Verify Randomness of Numbers appeared first on Security Boulevard.

Introduction Let’s be honest — nobody loves dealing with compliance. It usually sounds like a bunch of paperwork and legal jargon no one asked for. But when it comes to identity systems and Single Sign-On (SSO), it’s actually a big deal. Why? Because identity systems handle your users’ most personal stuff: their names, emails, IDs,...

The post Identity & SSO Compliance: GDPR, Certifications, and How to Keep It Clean appeared first on Security Boulevard.

Introduction Let’s be honest — passwords are a pain. They’re either too simple and easy to guess, or so complicated […]

The post How Passkeys Work (Explained Simply) appeared first on Security Boulevard.

Is NHI Security Investment Justifiable for Your Organization? Is your organization making a concerted effort towards investing in Non-Human Identities (NHIs) security? Given the increasing sophistication of cyber threats, ensuring tight security controls over machine identities is becoming vital in every industry. This is particularly significant for businesses operating in the cloud, where NHIs and […]

The post Is Investing in NHI Security Justified? appeared first on Entro.

The post Is Investing in NHI Security Justified? appeared first on Security Boulevard.

Why Upgrade Your NHI Strategy for Cloud Security? Cybersecurity threats have been steadily increasing, requiring cybersecurity professionals to frequently reassess and upgrade their strategies. A robust Non-Human Identities (NHIs) strategy, an essential aspect of data management, is often overlooked despite its crucial role in cloud security. So, why should organizations prioritize an NHI strategy upgrade? […]

The post Stay Ahead: Upgrading Your NHI Strategy for Cloud Security appeared first on Entro.

The post Stay Ahead: Upgrading Your NHI Strategy for Cloud Security appeared first on Security Boulevard.

Why is Smart Secrets Management Imperative for Modern Enterprises? With digital evolves at an unprecedented speed, modern enterprises face increased cybersecurity risks. One key area of concern is the management of Non-Human Identities (NHIs) and their associated Secrets. But why is smart secrets management so crucial? Let’s delve deeper into the subject. Attuning to the […]

The post Smart Secrets Management: A Must for Modern Enterprises appeared first on Entro.

The post Smart Secrets Management: A Must for Modern Enterprises appeared first on Security Boulevard.

Author/Presenter: Cameron Knauff (stillOS Developer)

Our sincere appreciation to LinuxFest Northwest (Now Celebrating Their Organizational 25th Anniversary Of Community Excellence), and the Presenters/Authors for publishing their superb LinuxFest Northwest 2025 video content. Originating from the conference’s events located at the Bellingham Technical College in Bellingham, Washington; and via the organizations YouTube channel.

Thanks and a Tip O' The Hat to Verification Labs :: Penetration Testing Specialists :: Trey Blalock GCTI, GWAPT, GCFA, GPEN, GPCS, GCPN, CRISC, CISA, CISM, CISSP, SSCP, CDPSE for recommending and appearing as speaker at the LinuxFest Northwest conference.

Permalink

The post LinuxFest Northwest: stillOS Launch Event appeared first on Security Boulevard.

Kai West, a 25-year-old British citizen, is accused of being the notorious "IntelBroker" hacker, who with co-conspirators attached dozens of major companies, stealing data and offering it for sale on the underground BreachForums site. The attacks cost victims as much as $25 million in damages, prosecutors say.

The post ‘IntelBroker’ Hacker Arrested for Wave of High-Profile Data Breaches appeared first on Security Boulevard.

Introduction Let’s be real — no one wakes up thinking about identity security. It’s one of those things that quietly works in the background… until it doesn’t. And when it fails, it’s usually a total disaster. Think about it. Every time you log into your bank, your company’s dashboard, or even your social media, your...

The post Identity Security Best Practices & Compliance — What Smart Teams Should Be Doing Now appeared first on Security Boulevard.

Introduction Let’s be honest — passwords are a pain. We’ve all been there, trying to remember which variation of our […]

The post Passkeys 101: What They Are, Why They Matter, and How They Work appeared first on Security Boulevard.

FedRAMP has strict requirements for the security of the companies looking to earn their certification. Among the many requirements you need to navigate are tests from your C3PAO, simulating malicious actors and common threat vectors. In order to understand what you need to do to pass, it’s worth going over what penetration testing is, what […]

The post FedRAMP Pen Test Scope vs. Rules of Engagement Explained appeared first on Security Boulevard.

What Are Application Security Testing Tools?  Application security testing (AST) tools identify vulnerabilities and weaknesses in software applications. These tools assess code, application behavior, or its environment to detect potential security risks. They help developers and security teams prevent cyberattacks by addressing security issues during the development and deployment phases. AST tools come in various […]

The post Best Application Security Testing Tools: Top 10 Tools in 2025 appeared first on Security Boulevard.

Frequently asked questions about recent Citrix NetScaler ADC and Gateway vulnerabilities that have reportedly been exploited in the wild, including CVE-2025-5777 known as CitrixBleed 2.

Background

Tenable’s Research Special Operations (RSO) team has compiled this blog to answer Frequently Asked Questions (FAQ) regarding CVE-2025-5777 and CVE-2025-6543, two Citrix NetScaler ADC and Gateway vulnerabilities that have reportedly been exploited in the wild.

FAQ

What vulnerabilities have been exploited?

As of the publication of this blog on June 27, active exploitation has been reported for the following CVEs:

CVE Description CVSSv4 Severity CVE-2025-5777 Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability (“CitrixBleed 2”) 9.3 Critical CVE-2025-6543 Citrix NetScaler ADC and Gateway Denial of Service (DoS) Vulnerability 9.2 Critical

What is CVE-2025-5777 (CitrixBleed 2)

CVE-2025-5777 is an out-of-bounds read vulnerability affecting Citrix NetScaler ADC and Gateway. Successful exploitation of this vulnerability would allow an attacker to read memory on an affected device, giving the attacker access to sensitive data including session tokens. These session tokens can be used to bypass multi-factor authentication (MFA) and allow the attacker to take over an authenticated session.

Source: Kevin Beaumont

Why is CVE-2025-5777 being called CitrixBleed 2?

The moniker CitrixBleed 2 was given to CVE-2025-5777 by security researcher Kevin Beaumont, who observed that this vulnerability is very similar to CVE-2023-4966, also known as CitrixBleed. The original CitrixBleed was widely abused by both ransomware groups and other threat actors, including advanced persistent threat (APT) actors. Given the similarities and likelihood of exploitation, Beaumont warned that “organisations patch, unless they want to become the detection in the wild after a security incident.”

When was CVE-2025-5777 first disclosed?

CVE-2025-5777 was disclosed by Citrix in security bulletin CTX693420 on June 17. In the same security bulletin, Citrix also addressed CVE-2025-5349, an improper access control vulnerability affecting the NetScaler Management Interface.

Was CVE-2025-5777 exploited as a zero-day?

As of June 27, there is no indication that CVE-2025-5777 (CitrixBleed 2) was exploited as a zero-day. The initial security bulletin from Citrix did not contain any language about exploitation, however on June 26, ReliaQuest released a blog post in which they note they have observed “indications of exploitation” and further state “ReliaQuest assesses with medium confidence that attackers are actively exploiting this vulnerability to gain initial access to targeted environments.” At the time this blog was published, Citrix had not updated their security bulletin to indicate active exploitation of CVE-2025-5777.

What is CVE-2025-6543?

CVE-2025-6543 is a DoS vulnerability resulting from a memory overflow issue. While there are similarities in the vulnerability descriptions from Citrix between CVE-2025-6543 and CVE 2025-5777, Citrix released a Cloud Software Group blog post clarifying that these two vulnerabilities are not related.

When was CVE-2025-6543 first disclosed?

CVE-2025-6543 was disclosed in security bulletin CTX694788 on June 25.

Was CVE-2025-6543 exploited as a zero-day?

Yes, CVE-2025-6543 was exploited in the wild as a zero-day. The initial security bulletin release indicated that exploitation had been observed and Citrix confirmed in their supplementary blog post on June 26 that CVE-2025-6543 was exploited as a zero-day.

Is there a proof-of-concept (PoC) available for these vulnerabilities?

As of the release of this blog post on June 27, no PoC has been publicly released for either of these vulnerabilities.

Are patches or mitigations available for CVE-2025-5777?

Yes, Citrix released patches for the following NetScaler ADC and Gateway versions that also addresses CVE-2025-5349, which is not known to have been exploited:

Affected Product Affected Version Fixed Version NetScaler ADC and NetScaler Gateway Prior to 13.1-58.32 13.1-58.32 and later releases of 13.1 Prior to 14.1-43.56 14.1-43.56 and later releases NetScaler ADC 12.1-FIPS Prior to 12.1-55.328 12.1-55.328 and later releases of 12.1-FIPS NetScaler ADC 13.1-FIPS and 13.1-NDcPP Prior to 13.1-37.235 13.1-37.235 and later releases of 13.1-FIPS and 13.1-NDcPP

Version 12.1 and 13.0 of NetScaler ADC and Gateway are end of life (EOL) and will not receive security updates. Therefore, customers are strongly encouraged to upgrade to a fixed version listed above as soon as possible.

In addition, Citrix recommends terminating all active ICA and PCoIP sessions after applying the updates using the following commands:

• kill icaconnection -all
• kill pcoipConnection -all

We strongly recommend reviewing security bulletin CTX693420 for the latest guidance as additional instructions and recommendations may be updated in the future.

Are patches or mitigations available for CVE-2025-6543?

Yes, Citrix released patches for the following NetScaler ADC and Gateway versions:

Affected Product Affected Version Fixed Version NetScaler ADC and NetScaler Gateway Prior to 13.1-59.19 13.1-59.19 and later releases of 13.1 Prior to 14.1-47.46 14.1-47.46 and later releases of 14.1 NetScaler ADC 13.1-FIPS and NDcPP Prior to 13.1-37.236 13.1-37.236 and later releases of 13.1-FIPS and 13.1-NDcPP

Version 12.1 and 13.0 of NetScaler ADC and Gateway are end of life (EOL) and will not receive security updates. Therefore, customers are strongly encouraged to upgrade to a fixed version listed above as soon as possible.

Note that according to the security bulletin, “NetScaler must be configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server” in order to be vulnerable to CVE-2025-6543.

Are Indicators of Compromise (IoCs) available?

According to the Citrix Cloud Software Group blog post, customers should contact Citrix customer support for updates on IoCs. We also recommend reviewing their blog post for further updates on both CVE-2025-5777 and CVE-2025-6543.

Has Tenable released any product coverage for these vulnerabilities?

A list of Tenable plugins for these vulnerabilities can be found on the individual CVE pages as they’re released:

• CVE-2025-5777
• CVE-2025-6543

This link will display all available plugins for these vulnerabilities, including upcoming plugins in our Plugins Pipeline.

Get more information

• Citrix Security Bulletin CTX693420 (CVE-2025-5777, CVE-2025-5349)
• Citrix Security Bulletin CTX694788 (CVE-2025-6543)
• CitrixBleed 2: Electric Boogaloo CVE-2025–5777
• ReliaQuest Blog: Threat Spotlight: CVE-2025-5777: Citrix Bleed 2 Opens Old Wounds
• Tenable Blog: CVE-2023-4966: Citrix NetScaler ADC and NetScaler Gateway Information Disclosure Exploited in the Wild
• Tenable Blog: Frequently Asked Questions for CitrixBleed (CVE-2023-4966)

Join Tenable's Research Special Operations (RSO) Team on the Tenable Community.

Learn more about Tenable One, the Exposure Management Platform for the modern attack surface.

The post CVE-2025-5777, CVE-2025-6543: Frequently Asked Questions About CitrixBleed 2 and Citrix NetScaler Exploitation appeared first on Security Boulevard.