Episode 107 - Citrix ADC Vulnerability Deep Dive, CryptoAPI & RDP Bugs & More

This week’s episode goes deep into the Citrix ADC vulnerability leaving no stone unturned in what is now the 5th week of this ongoing saga and boy did things escalate this week! I also talk about a very serious RDP vulnerability that has been patched this week, along with a CryptoAPI vulnerability that warranted a press conference and warning from the NSA Cyber Security Team AND news on App Volumes 4.0, MSIX support for services plus much more!

This episode is brought to you in large part thanks to my sponsors:

Episode 107 is available on Soundcloud:

And on YouTube:

If you’d like to play the Podcast on a different podcast service such as Apple Podcasts, Google Podcasts or Spotify. You can find this episode at 5BytesPodcast.com

Here are this episodes links as shown in the YouTube video:

Scripts, Tricks & Tips:
Shodan Monitor Subscription
VDR Blog on How to Upgrade from App Volumes 2.18 to 4.0
App-V Reporting Product
EdgeChromium-FirstRunExperience.ps1

Citrix ADC Vulnerability Deep Dive:
MDSec.co.uk Article
Shodan Citrix NetScaler ADC Query
Branded Shitrix
Mass Scan Events
Dutch Company Compromised
Total Vulnerabilities Graph
Threat Level Map
nc.conf Compromise Info
Citrix Honeypot
Curated List of References
Firmware Upgrade Release Dates
Mitigation Not Working on 12.1.50.28