NetScaler root takeover, Siemens app in ClickFix, Plex hijacks | Cyber Security News Oct 20
The NetScaler flaw that crashed appliances is a step in a root takeover whose implant tries to copy itself to the HA partner. ClickFix crews bring a signed Siemens program to run their malware, Plex servers are being hijacked a day after an exploit went public, and a fake WatchGuard download site collects VPN logins. Every version number and every fix in this episode was checked against the vendor's advisory, release notes or the CVE record before it aired. Today's question: Where does your team tell people to get the VPN client? Reply in the comments or at feedback@defensivesecurity.org.
1…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.