On August 21, Citrix disclosed that the appliance many organizations use to front their remote access — NetScaler Gateway — could be talked past its login checks entirely by an unauthenticated attacker taking an alternate path through the request flow. The same day, Microsoft published a maximum-severity remote code execution flaw in Entra ID, the service that issues identity tokens for a substantial share of the corporate world. Neither story is about stolen credentials.
Discovery
Learnings
- auto_storiesStories
- categoryAreas
- helpFAQ
- forumConversations
- descriptionPapers
- mailNewsletters
- video_libraryVideos
- timelineTimeline
Guidance
- codeTechnology of APIs
- business_centerBusiness of APIs
- campaignEvangelism of APIs
- gavelGovernance of APIs
- historyHistory of APIs
- account_balancePolitics of APIs
Toolbox
- domainProviders
- apiAPIs
- cloudSolutions
- buildTools
- verifiedStandards
- gavelRegulations
- horizontal_ruleHeaders
- layersOverlays
- extensionExtensions
- schemaSchema
- policyPolicies
- ruleRules