EUVD-2018-0849

Malware in sbrugna...

Thousands of Oracle NetSuite Sites at Risk of Exposing Customer Information

Cybersecurity researchers are warning about the discovery of thousands of externally-facing Oracle NetSuite e-commerce sites that have been found susceptible to leaking sensitive customer information. "A potential issue in NetSuite's SuiteCommerce platform could allow attackers to access sensitiv...

Pass-through Authentication Might Fail Starting Publish Desktops with StoreFront and Desktop Viewer

Pass-through authentication to StoreFront does not work when starting XenApp published desktops. When users log on to the client workstation with Windows Active Directory AD credentials, the Receiver starts and successfully passes the user credentials to the configured Store and displays availabl...

February 8, 2022—KB5010422 (Security-only update)

February 8, 2022—KB5010422 Security-only update Summary Learn more about this security update, including improvements and fixes, any known issues, and how to get the update. IMPORTANT Windows 7, Windows Server 2008 R2, Windows Embedded Standard 7, and Windows Embedded POS Ready 7 have reached the...

Troubleshooting Citrix Pass-Through Authentication

This article outlines workarounds and resolutions to specific Citrix pass-through authentication issues. Common Pass-Through Authentication Issues and Inquiries Refer to the following links for information on common pass-through authentication issues and inquiries: Citrix Docs - Enabling...

Detecting Microsoft 365 and Azure Active Directory Backdoors

Mandiant has seen an uptick in incidents involving Microsoft 365 M365 and Azure Active Directory Azure AD. Most of these incidents are the result of a phishing email coercing a user to enter their credentials used for accessing M365 into a phishing site. Other incidents have been a result of...

Citrix Single Sign-On (SSONSVR.exe) Fails to Start on Computers using Intel Credentials Manager

Pass through authentication is not working and SSONSVR.exe does not appear in Task Manager...

How to Deploy Citrix Receiver for Pass-Through Authentication Using Active Directory Group Policy

This article describes how to deploy and configure CitrixReceiver.exe so that it can be used in Pass-Through authentication mode in a XenApp or XenDesktop deployment. This article also provides a detailed step-by-step guide about deploying and configuring CitrixReciverEnterprise.exe onto a large...

Step 1. Identify users: top 10 actions to secure your environment

This series outlines the most fundamental steps you can take with your investment in Microsoft 365 security solutions. Well provide advice on activities such as setting up identity management through active directory, malware protection, and more. In this post, we explain how to create a single...

Design/Logic Flaw

When an SRX Series device is configured to use HTTP/HTTPS pass-through authentication services, a client sending authentication credentials in the initial HTTP/HTTPS session is at risk that these credentials may be captured during follow-on HTTP/HTTPS requests by a malicious actor through a...

Single Sign on Support for Linux Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Question The client wants to achieve authenticated access to XenApp/XenDesktop infrastructure via...

Citrix Receiver Error "Unable To Login" When Connecting To StoreFront With SSON Enabled

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. When users attempt to run an applicationfrom Citrix Receiver they are presented with an error messag...

Windows Pass-Through Authentication Methods Improper Validation

1. Advisory Information Title: Windows Pass-Through Authentication Methods Improper Validation Advisory ID: CORE-2015-0005 Advisory URL: http://www.coresecurity.com/advisories/windows-pass-through-authentication-methods-improper-validation Date published: 2015-03-10 Date of last update: 2015-03-1...

CVE-2013-6013

Buffer overflow in the flow daemon flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X44 before 12.1X44-D15, 12.1X45 before 12.1X45-D10 on SRX devices, when using telnet pass-through authentication on the firewall, might allow remote attackers to execute arbitrary code via a...