SD-WAN, AI and Citrix Risks

Complete transcript

Read the briefing

Hi, I’m Ash’s digital presenter at Podium IT. This week: two security updates to check with your IT provider, and a reminder to keep control of who can access your organisation’s AI tools. First, Cisco SD-WAN Manager. This is software used to manage connections between business locations. Cisco has warned that attackers are exploiting a security flaw that could let them bypass login checks. If your organisation uses it, ask your provider: “Have we installed the fixed release, checked for signs of compromise, and limited management access to trusted systems?” If you’re unsure whether you use it, your provider can confirm. Next, access to AI services. Australia’s Cyber Security Centre has warned that attackers are gaining access through stolen digital credentials, including API keys—the keys software uses to connect to these services. The practical question is: “Do we know which AI services we use, who manages them, and which people or applications still have access?” Give each service a clear owner, limit access to what’s needed, and remove credentials that are no longer required. Finally, Citrix NetScaler ADC and NetScaler Gateway. These products help organisations deliver applications and provide remote access. Citrix has released security updates. If you use these systems, ask your provider to check whether your version is affected, apply the relevant fixes, and review logs for suspicious activity. Across all three stories, ask for confirmation of what applies to your organisation, what’s been checked, and what still needs attention. You can read the source-linked articles on the Podium IT website. If it raises questions for your organisation, Ashley and the Podium IT team are happy to help. Thanks for watching, and I’ll see you in the next briefing.