U.S. CISA adds Citrix NetScaler ADC and Gateway flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds U.S. CISA adds Citrix NetScaler ADC and Gateway flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Citrix NetScaler ADC and Gateway, tracked as CVE-2025-5777, to its Known Exploited Vulnerabilities (KEV) catalog. The CVE-2025-5777 flaw, dubbed ‘CitrixBleed 2‘ (CVSS v4.0 Base Score […]

The Story of Cyberattack: MOVEitTransfer

In countless organizations worldwide, from bustling universities to national healthcare systems, the MOVEit Transfer tool developed by Progress Software quietly fulfills a vital mission: secure file transfer. Built to facilitate the seamless exchange of sensitive data, MOVEit is trusted by governments, financial institutions, energy firms, and beyond. It’s robust, reliable, and was considered safe. However, … Read more

Inside Cloud Security in 2025: Key Findings from SecPod’s Discovery Survey

Hybrid complexity. Misconfiguration risks. Tool fatigue. Our 2025 Cloud Security Discovery Report reveals a cloud security landscape that is still struggling to catch up with the pace of digital transformation. SecPod surveyed over 400 cloud security leaders and practitioners including CISOs, CIOs, security architects, DevSecOps teams, and SOC analysts to understand what is working, what … Read more

Scaling AI Too Fast: The Cybersecurity Blind Spots No One Talks About

Scaling AI across enterprises is moving faster than most security teams can adapt. IBM’s 2025 X-Force Threat Intelligence Index reported an 84% rise in phishing emails delivering infostealers in 2024, often powered by generative AI to mimic human behavior and scale attacks. AI is no longer confined to research or controlled environments. Large language models … Read more

CISA Adds Citrix NetScaler CVE-2025-5777 to KEV Catalog as Active Exploits Target Enterprises

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting Citrix NetScaler ADC and Gateway to its Known Exploited Vulnerabilities (KEV) catalog, officially confirming the vulnerability has been weaponized in the wild.
The shortcoming in question is CVE-2025-5777 (CVSS score: 9.3), an instance of insufficient input validation that