Xi Jinping Calls for People-Centered AI Development at WAIC, Expands Global Cooperation 
AI Chip Stocks Face Valuation Pressure as Investors Shift Toward Big Tech and Software 
Trump Slams New York Data Center Ban, Warns AI Investment Could Shift to Other States 
Moonshot Launches Kimi K3, China's Largest Open-Source AI Model 
Jamie Dimon Warns Anthropic's Mythos AI Poses National Security Risks 
Hyundai Takes Full Control of Boston Dynamics to Accelerate Humanoid Robot and AI Strategy 
Arm Stock Falls After HSBC Downgrade, Citing Limited Near-Term AI Upside 
SK Hynix Stock Soars as AI Memory Demand Outlook Fuels Chip Rally 
Apple Intelligence China Approval Lifts Alibaba and Baidu Shares 
TSMC Q2 Revenue Surges 36% as AI Chip Demand Powers Growth Ahead of Earnings 
Yaskawa Electric Shares Slide as Weak Profit Overshadows Strong AI Demand 
Samsung to Launch First Yongin Chip Plant by 2029 as South Korea Speeds Up Semiconductor Hub 
KAIST, Stanford Develop Self-Dressing Robot for Cleanrooms and Emergency Gear 
SoftBank Corp Partners With Sierra to Expand AI Customer Support Across Japan 
SpaceX Stock Falls Below IPO Price as Investors Weigh Losses and Lockup Expiry 
xAI Sues Man for Allegedly Using Grok to Generate AI Child Abuse Deepfakes 
Sam Altman Admits OpenAI Missteps, Promises Major AI Comeback Focused on User Freedom 
A recent surge in cyberattacks has put numerous high-profile companies on alert. Attackers are exploiting a security flaw known as CitrixBleed in Citrix systems, a vulnerability tracked as CVE-2023-4966. This issue has impacted several notable entities including aerospace leader Boeing, the international banking giant ICBC, global port operator DP World, and the prominent law firm Allen & Overy.
The CitrixBleed bug allows hackers to access large amounts of data from Citrix devices, including sensitive session tokens, without needing passwords or two-factor authentication. This vulnerability mainly affects on-premise versions of Citrix NetScaler ADC and NetScaler Gateway platforms, commonly used by large businesses and government agencies for application delivery and VPN services.
Another Victim in a List of Cybersecurity Breaches
The Shadowserver Foundation, a nonprofit organization monitoring online threats, reports that the majority of compromised systems are in North America. Following the discovery of the flaw, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning to federal agencies, emphasizing the importance of applying available patches to mitigate risks.
Citrix acknowledged the flaw on October 10 and released patches to address it. However, it wasn't until a week later that the company updated its advisory to confirm the active exploitation of this vulnerability.
Early targets of these attacks included sectors like professional services, technology, and government. Cybersecurity firm Mandiant noted multiple instances of successful exploitation, beginning as early as late August. Rapid7, another cybersecurity company, observed the bug's exploitation across healthcare, manufacturing, and retail industries. Their investigations revealed hackers' capability to move laterally within networks and access data.
The Link with ICBC
A particular group, the Russia-linked LockBit ransomware gang, has claimed responsibility for several major breaches linked to CitrixBleed. Security researcher Kevin Beaumont reported that this gang compromised the U.S. branch of ICBC, the world's largest lender by assets, via an unpatched Citrix device. The attack disrupted ICBC's trade-clearing operations, and the bank reportedly paid a ransom to resolve the issue.
The impact of CitrixBleed extends beyond individual companies, underscoring the importance of robust cybersecurity measures in the face of increasingly sophisticated cyber threats.
