Critical Zoho Zero-Day Flaw Disclosed

UPDATE A zero-day vulnerability has been disclosed in the IT help desk ManageEngine software made by Zoho Corp. The serious vulnerability enables an unauthenticated, remote attacker to launch attacks on affected systems. Zoho has now released a security update addressing the vulnerability. As of...

Zoho Releases Security Update on ManageEngine Desktop Central

Zoho has released a security update on a vulnerability CVE-2020-10189 affecting ManageEngine Desktop Central build 10.0.473 and below. A remote attacker could exploit this vulnerability to take control of an affected system. ManageEngine Desktop Central is a unified endpoint management solution...

Partner Perspectives: Protecting Industrial Control Systems with Verve Industrial’s Endpoint Management and Carbon Black App Control

Imagine waking up in the morning, flipping on your light switch and nothing happens. The natural human response is to flip the switch a few more times before realizing something is wrong. You jump out of bed and notice the smart coffeemaker has not brewed a fresh cup of coffee that you’ve come to...

Certificate chain no longer works correctly on Endpoint Management Server, devices fail to connect

You may notice that a certificate is soon to expire on Endpoint Management Server. After obtaining a new certificate, devices no longer connect. Inspecting the logs on the client show that there is now a certificate trust error, even though the new certificate is valid...

Unable to unlock iOS or iPadOS devices via Administration Console after upgrading to 13.1

Unable to unlock iPhone/iPad from Citrix Endpoint Management administration console after upgrading to iOS/iPadOS 13.1+. Note:No error message is displayed when command fails. The device ignores the command...

You receive an error: "No tenant identifying information found in either the request or implied by any provided credentials" when integrated with Intune and Secure Hub is in use.

When enrolling in to Citrix Endpoint Management for MDM, if the deployment is integrated with Intune for MAM, you may experience the following error and behaviour. Without Secure Hub installed using Intune MAM only, then no problems are seen. When Secure Hub is installed and enrolled for MDM with...

This Week in Security News: DevOps Implementation Concerns and Malware Variants

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about how most respondents to a Trend Micro survey shared their concern for the risks in implementing DevOps. Also, read on about how...

How to cost-effectively manage and secure a mobile ecosystem

Today’s post was written by Roxane Suau, Vice President of Marketing for Pradeo. In the corporate environment, mobile devices and applications are at the center of communications, enhancing collaborators’ productivity with 24/7 access to information. But at the same time, they represent thousands...

iOS Public App Store app uploads are not working when using the App Store app URL

With Endpoint Management, when an Administrator attempts to upload an iOS and/or iPadOS public App Store app by enteringthe URL by using the new app URL on the App Store, the app is not found and the error below is displayed...

How to Renew an APNS Certificate for Endpoint Management

This article describes how to update an APNs certificate for Endpoint Management. Refer to Citrix documentation - APNs certificates...

CVE-2018-18571 - Authentication Bypass vulnerability in XenMobile Server

Description of Problem A vulnerability has been identified in Citrix XenMobile Server that could permit an attacker to impersonate and take actions on behalf of any Mobile Application Management MAM enrolled device. The vulnerability has been assigned the following CVE number: • CVE-2018-18571:...

How Endpoint Management Can Keep Workplace IT Secure

Workplaces have become highly connected. Even a small business could have dozens of devices in the form of desktops, mobile devices, routers, and even smart appliances as part of its IT infrastructure. Unfortunately, each of these endpoints can now be a weak link that hackers could exploit. Hacke...

How Endpoint Management Can Keep Workplace IT Secure

Workplaces have become highly connected. Even a small business could have dozens of devices in the form of desktops, mobile devices, routers, and even smart appliances as part of its IT infrastructure. Unfortunately, each of these endpoints can now be a weak link that hackers could exploit. Hacke...

Citrix Endpoint Management TLS Version Deprecation

To improve the security of connections to Citrix Endpoint Management, Citrix will block any communication over Transport Layer Security TLS 1.0 and 1.1 as of March 15, 2019. NOTE: On-Prem CEM customers also can follow the same instructions on their MDM 443 and 8443 and MAM 443 Service or Service...

Step 5. Set up mobile device management: top 10 actions to secure your environment

The “Top 10 actions to secure your environment” series outlines fundamental steps you can take with your investment in Microsoft 365 security solutions. In “Step 5. Set up mobile device management,” you’ll learn how to plan your Microsoft Intune deployment and set up Mobile Device Management MDM ...

CVE-2017-18362

ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all...

First Time Set up - MAM enrollment is failing in Citrix Endpoint Management

This scenario is for new cloud set up where new MAM enrollment is failing and user will get "Access to company network is denied". While browsing NSG URL and after providing credential if you do not get "HTTP Status 404 - Not Found" page but instead we get "Secure Connection Failed" error message...

CVE-2018-8892

A cross-site request forgery CSRF vulnerability in the Management Console of BlackBerry UEM versions earlier than 12.9.1 could allow an attacker to make modifications to the UEM settings in the context of a Management Console administrator...

XenMobile/Endpoint Management: Cloud Gear Icon returning "this page isn't working HTTP ERROR 400"

Description: error "this page isn't working HTTP ERROR 400" may be displayed when trying to access the Cloud XenMobile / Endpoint Management Client instance when customers go to their own xxxx.xm.cloud and then click on the Could Gear Icon from the green tool bar at the top Doing so, will...

VMware Workspace ONE Unified Endpoint Management Console (AirWatch Console) SAML Authentication Bypass Vulnerability

VMware Workspace ONE Unified Endpoint Management Console is a console product from VMware. A SAML authentication bypass vulnerability exists in the VMware Workspace ONE Unified Endpoint Management Console AirWatch Console, which could allow an attacker to emulate an authorized SAML session if...