Security News > 2020 > January > Week in review: Windows crypto flaw, API security risks, exploits for Citrix security hole abound

Exploits for Citrix ADC and Gateway flaw abound, attacks are ongoingWith several exploits targeting CVE-2019-19781 having been released over the weekend and the number of vulnerable endpoints still being over 25,000, attackers are having a field day.

January 2020 Patch Tuesday: Microsoft nukes Windows crypto flaw flagged by the NSAAs forecasted, January 2020 Patch Tuesday releases by Microsoft and Adobe are pretty light: the "Star of the show" is CVE-2020-0601, a Windows flaw flagged by the NSA that could allow attackers to successfully spoof code-signing certificates and use them to sign malicious code or intercept and modify encrypted communications.

Cyber attackers turn to business disruption as primary attack objectiveOver the course of 2019, 36% of the incidents that CrowdStrike investigated were most often caused by ransomware, destructive malware or denial of service attacks, revealing that business disruption was often the main attack objective of cybercriminals.

Companies increasingly reporting attacks attributed to foreign governmentsMore than one in four security managers attribute attacks against their organization to cyberwarfare or nation-state activity, according to Radware.

2020 forecast: Attackers will target non-traditional systemsHere are four predictions of where attackers are headed in 2020 - areas that your technology security team should focus their efforts on.

News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/wNAj6nCX2Ec/