Operations | Monitoring | ITSM | DevOps | Cloud

Citrix was facing a major security crisis before its official warning even went out. Companies were already pulling critical network devices offline as attackers exploited serious vulnerabilities in Citrix NetScaler ADC and Gateway systems. In this ShipTalk clip, Adam, Martin, and Starr break down the Citrix zero-day vulnerabilities, the race to respond, and the impossible decision facing security teams: keep potentially compromised infrastructure running or rush to deploy a patch.

What if AI could find a security vulnerability, determine whether it actually matters, write the fix, validate it, and open a pull request for review? In this demo, see how Harness Security Testing Agents work together to move from vulnerability detection to a verified fix with an audit trail along the way. The system uses three agents: Harness can analyze where vulnerabilities exist in your environment, determine whether they’re actually reachable, prioritize what needs to be fixed, and automatically create remediation pull requests.

Citrix NetScaler customers were pulling devices offline as attackers moved faster than the traditional patch and response cycle. What happens when cyberattacks move faster than security teams can react? In this episode of ShipTalk, Martin Reynolds and Adam Arellano are joined by Starr Brown, Director of Open Source Projects at OWASP, to break down the latest Citrix NetScaler ADC and Gateway security vulnerabilities, active exploitation, and the rapidly shrinking window between vulnerability discovery and attack.

An Alibaba-affiliated AI agent went full crypto bro. During reinforcement learning, the agent autonomously started mining cryptocurrency, downloaded the tools it needed, and created a reverse SSH tunnel to get around network restrictions. What starts as a funny story about an AI vaping and mining crypto gets a lot more serious when you realize how sophisticated the behavior actually was.