Citrix has established itself as a leader in enabling secure, hybrid work environments through its industry-leading virtualization, secure private access, and application delivery products. For decades, we’ve empowered organizations to achieve operational flexibility while maintaining robust security standards. Our recent …

Cloud Software Group is aware of a recent series of password spraying attacks directed at various organizations around the globe. These attacks have been seen across various products and platforms, suggesting an industry-wide issue, as highlighted in the following resources:…

Citrix Secure Private Access provides zero trust network access (ZTNA) to private applications. It provides stronger security than a VPN, a simpler way to connect to cloud and on-premises data centers, and an easier way to scale access to private …

As we recognize Cybersecurity Awareness Month this October, it’s the perfect opportunity to reassess how we secure applications in today’s rapidly evolving technology landscape. With the increase of remote work, cloud-based applications, and SaaS platforms, attack surfaces have expanded …

サイバー犯罪はあらゆる業界で増加傾向にあり、企業は新たなセキュリティ対策の導入を迫られています。現在、データ侵害の世界平均コストは約445万ドルであり、当然ながら多くの企業は新たなセキュリティソリューションに投資しています。これは特に金融機関に当てはまります。その理由は、セキュリティ侵害はコストがかかるだけでなく、顧客の信頼を失い、組織の評判にも悪影響を及ぼすからです。

驚くべきことではなく、銀行や投資会社がリスク低減とレジリエンス強化に投資していることは、明らかです。Gartner 2023 CIO and Technology Executive Surveyによると、これらの企業のCIOは2023年に、サイバーセキュリティ、データとアナリティクス、統合テクノロジー、クラウド、に最も多くの新規または追加資金を使うとしていました。しかしながら、セキュリティを強化しても、従業員がそのセキュリティ対策に従わなければ何の意味もありません。別のGartner surveyでは、自分自身やチームのビジネス目標達成を優先すれば、従業員の74%がサイバーセキュリティのガイダンスに従わないと回答しました。金融機関は、強固なセキュリティを備えた柔軟性高いデジタル戦略を採用し、データを侵害から保護すると同時に、重要なシステムへのセキュアでコンプライアンス準拠のリモートアクセスを可能にしなければなりません。これがシステムのサイロ化をなくし、顧客価値の向上につながります。

サイバー脅威の増大

データ侵害のコストは年々増加しているだけでなく、サイバー攻撃の件数も増加傾向にあります。米国国土安全保障省によると、2020年から2022年にかけて米国ではランサムウェア攻撃が47％増加し、2023年上半期にはランサムウェア攻撃の被害額が世界中で4億4,910万ドルに上ったそうです。つまり、ランサムウェア攻撃は順調に拡大し、過去最高の利益を記録することが確実なのです。

加えて、大きな組織を狙う手口が目立つようになり、大手金融機関は悪意を持った者たちの標的となっています。こうした脅威に先手を打つために、金融機関は脅威検知に向けたAI、生体認証、ブロックチェーンといった高度な防御策を導入する必要があります。技術が進歩するにつれ、サイバー脅威の高度化も進んでおり、銀行は多層的なセキュリティ戦略を採用し、量子コンピューティングのような未来の手法も考慮する必要に迫られています。

シトリックスは幅広い多要素認証製品と連携可能です。最適なIDプロバイダー（IdP）を使用して、お客様のビジネスデータを保護します。さらにNetScalerが、API保護、DDoS保護、ボット攻撃緩和のためのセキュアなアプリケーション配信を強化します。

リスク管理、規制、コンプライアンス 

金融機関はデータを保護するために多大な努力を積み重ねていますが、国や地域の規制に対処しなければなりません。リスク管理と規制コンプライアンスは金融機関にとって常にある課題です。、ユーザー体験とセキュリティを高める可能性がある一方で、厳格な規制遵守に関する機能を持たない新技術の導入には注意が必要です。例えばCapital Oneは、2019年に発生した大規模な顧客データ漏洩に関して、厳重なサイバーセキュリティ対策を実施しなかったとして、1億9,000万ドルの和解金…

More than just an incremental upgrade! The release of uberAgent 7.2 represents a comprehensive evolution in cybersecurity defenses and the enhancement of End-user Computing experience (EUCx), as the agent capabilities for macOS endpoints have dramatically increased since the last version.…

Cybercrime is on the rise across every industry, pushing organizations to adopt new security measures. Now that the global average data breach costs around 4.45 million dollars, it’s no surprise that so many organizations are investing in new security solutions. …

The number one concern across all of our customers is security. With the average cost of a data breach in 2023 costing over 4.45 million, companies have good reason to invest in their security and zero trust infrastructure. Per …

In the increasingly digitized world of healthcare, safeguarding sensitive patient data and ensuring the integrity of critical systems are both top concerns. Here, Michelle Leafloor, VP of Health Information Technology Services and CIO at Hamilton Health Sciences, shares insights into …

This blog was co-authored by Dave Brear, Senior Principal Solution Architect at Citrix.

2023 was a challenging year for many businesses. Geopolitical instability and financial uncertainty have had broad reaching implications. Hybrid work continues to be in a state of …

Cybersecurity is on everyone’s mind. Especially when the data that you need to protect, like electronic health records (EHRs), contains sensitive patient information. Cyber attacks are on the rise across the healthcare industry so now is the time to strengthen …

In the current era of hybrid work, businesses are constantly looking to optimize operational costs while addressing challenges such as increased cybersecurity risks and loss of control over IT governance. Amid these concerns, finding suitable business solutions that meet specific …

If ever there was a time for the manufacturing industry to futureproof themselves and their supply chains, that time is now. Recent global events have created unprecedented change, forcing companies to look for ways to embed security, resilience, and agility …

We all make mistakes. Perhaps we left our laptop open when we got up at a coffee shop. Maybe we clicked a link inside an official-looking email. And who among us hasn’t used the same password across multiple web apps …

This is a guest blog post by Sydney Atlass, Marketing Operations Specialist at IGEL.

In 2022, 25 percent of ransomware attacks targeted healthcare organizations. This equates to more than 300 hospitals that were hit with ransomware, resulting in compromised …

This is a guest blog post by Cristina Roa, VP of Global Business Development at SessionGuardian.

Can you prove who’s looking at your healthcare organization’s sensitive protected health information (PHI)? Most organizations cannot verify the identity of users logging …

This blog post was co-authored by Gavin Strong, Pre-Sales Engineer at Citrix.

To meet the needs of a fast-growing, distributed workforce, organizations have rolled out virtual desktop infrastructure (VDI) with a goal of improving employee productivity and the end-user experience.…

Zero trust has become a crucial component in the cybersecurity strategy of organizations everywhere. More and more enterprises are finding themselves turning toward zero trust architecture to keep their data, infrastructure, and other assets safe. As a result, this concept …

Today we released builds to fix CVE-2022-27518, which affects the following Citrix ADC and Citrix Gateway versions: 12.1 (including FIPS and NDcPP) and 13.0 before 13.0-58.32 of Citrix ADC and Citrix Gateway, both of which must be configured with an …

There has been no lack of exciting news coming from the Citrix and Google partnership this year. From introducing two new purpose-built Citrix DaaS editions in the Google Marketplace to rolling out new technical capabilities like Citrix Provisioning Service for …

Today’s manufacturer isn’t short of challenges. Supply chain disruptions and labor shortages are just some of the obstacles it must address. Another is the ever-increasing risk of a cyberattack. In this blog post, we look at what makes the industry …

If ever there was a time for the manufacturing industry to futureproof itself and its supply chains, that time is now. Recent global events have created unprecedented change in the industry, forcing companies to look for ways to embed security, …

Are you considering moving some of your on-premises workloads to the cloud? Many organizations are migrating to hybrid cloud environments. This allows them to enjoy the benefits of the cloud while continuing to leverage existing datacenter investments. Here are some …

Zero trust architectures have gained rapid adoption by cybersecurity teams recently with the rise of knowledge workers moving to remote or hybrid work models. The need to secure access for these workers without compromising their productivity, especially in light of …

“Never trust, always verify” and “just enough” access.

These are the key philosophies behind zero trust approaches to cybersecurity. Although the name zero trust speaks for itself, cybersecurity architectures based on zero trust approaches ensure that your data, and infrastructure …

Looking to achieve zero trust security for your business?

You’re not alone.

The White House recently released an edict declaring the implementation of a federal zero-trust architecture (ZTA) requiring all agencies to comply with specific cybersecurity standards and objectives by …

In a perfect world, you could turn a blind eye to your company network and safely trust that anyone trying to access it had the purest intentions. But in reality, there’s no telling how or when a malicious actor might …

The reality of today’s fast-paced, increasingly remote work environment positions your business as vulnerable to security breaches. Your employees increasingly rely on their own unprotected devices for work, leveraging SaaS and web-based apps to access your valuable assets and data.…

Users often get confused between virtualization and cloud computing. While virtualization and cloud computing both create useful environments, there are key differences between the two technologies. In short, virtualization creates simulated versions of a machine’s software or hardware components, while …

As organizations embrace digital transformation, the need to protect data and control who accesses it increases. Distributed workforces and online users compound the challenge since they often need remote access to critical apps and data. Many organizations also have …

While VPNs have traditionally connected an end-user with the organization’s private network, VDI and DaaS enable users to securely connect to a fully virtual workspace.

As organizations embrace remote and hybrid work models, cybersecurity risks grow. According to our latest …

Information technology has evolved, and so has the way we engage with it for work. With the proliferation of remote work, connected devices, cloud computing systems, and access points — how can we keep users safe without impeding their productivity?…

The crisis in U.S. healthcare isn’t exactly a new development — but it’s getting worse, fast. Annual industry spending has soared to $3.8 trillion, or nearly one-fifth of the nation’s GDP. But for all their investment, healthcare organizations are struggling …

Which web browsing risks concern you the most?

Businesses are faced with the reality of threat actors attempting to access their networks and infrastructure and getting access to their applications and data. Today’s workforce is increasingly remote-capable, and chances are …

This is a guest blog post by Jason Hudson, Technical Solutions Architect, and Michele Pelusi, Marketing Manager U.S. at 10ZiG.

Username entered. Password entered. We’re signing in … but wait, what about security? In today’s world, you can never …

How are you managing the risk presented by your employees using personal devices to access corporate resources outside the office?

The reality of an increasingly remote workforce means your valuable data and information is being requested from devices you may …

Citrix has been in the business of delivering secure remote work through its digital workspace solutions for more than three decades. And leading companies around the world are using them to provide employees with access to the applications and insights …

With RSA Conference 2022 happening in San Francisco this week, we’re proud to announce that Citrix was named a Leader and Fast Mover in GigaOm’s Radar report for ZTNA.

Citrix offers a complete ZTNA solution with very strong, well-thought-out …

Zero trust network access (ZTNA) has been a watchword in digital security for years. Recently, the technology has reached a tipping point.

Two parallel trends have increased the importance of using ZTNA to connect users with companies’ digital resources. First, …

Akshay Kakar, Principal Product Marketing Manager at Citrix, contributed to this blog post.

Cyberattacks should be a concern for everyone — businesses, government organizations, and consumers. Among the targets threat actors focus on as they search for weak links are …

Two of the most common methods for securing access to business resources are attribute-based access control (ABAC) and role-based access control (RBAC). These types of access control models determine authorization based on who the user is and what resources they’re …

The massive shift to remote work and adoption of new technologies to support distributed workforces during the COVID-19 pandemic expanded the attack surface, creating challenges for organizations that were trying to enable access to essential resources and to keep employees …

You’re probably familiar with the idea of a computer network resembling a castle with tall walls, a single front gate, and a moat. But as we all know, that’s a poor way to secure modern IT infrastructure. With thousands of …

Citrix is proud to announce that Citrix ADC version 12.1 has achieved Common Criteria certification. The evaluated configuration consists of the physical platforms MPX 8900 FIPS and MPX 15000-50G FIPS. We’re also thrilled to have the VPX FIPS virtual …

As we enter the third year of the pandemic, many healthcare organizations are reeling from burnout, revenue disruption, and shifting care-delivery models — not to mention the constant threat of cyberattack. But for all the challenges you’ve endured, the outlook …

Cybersecurity can often seem to present impossible challenges as organizations strive to repel attack attempts. But, really, cybersecurity’s is about risk management — layering on controls to reduce risk to an acceptable level.

Cybersecurity risk management requires a multi-faceted approach, …

Earlier this month, Ukraine was the target of a series of cyberattacks, alleged to be part of a larger hybrid warfare campaign conducted by Russia. While geopolitical issues are beyond the scope of this blog post, these attacks should serve …

Conversations about the future of work were propelled forward during the pandemic. The rapid shift to remote work and the necessity to expand bring-your-own-device (BYOD) programs encouraged business leaders to fully embrace innovative business models. This trend is expected to …

Citrix Virtual Apps and Desktops is easy to manage, delivers a seamless app experience, can secure your organization’s apps, and help you boost employee productivity. Citrix Gateway ensures secure access to apps, enabling SSO, authenticating users, and protecting your network …

It’s a new year, and we’re all in the thick of setting goals and priorities for the next 12 months. In our latest Fieldwork by Citrix report, we break down key recommendations for building a workplace that wins in …

New remote and hybrid working styles have companies thinking deeply about the devices employees use to access company infrastructure. And many are looking into options for privileged access management (PAM) and identity access management (IAM). Both are common methods for …

This is a guest blog post by Stacey Loew, Sr. Director, Technical Marketing, ATSG.

Hybrid work is being heralded as the next great disruption in the workplace, and although there was already a trend towards working from home, the …

As we near the end of 2021, one thing is certain — continued change. The global pandemic has forced businesses to significantly adapt how they operate and how/where their employees work, prompting massive technological transformation across the board. For channel …

A zero-day exploit affecting the Apache Log4j version from 2.0-beta9 to 2.14.1 was made public on December 9, 2021, as to which JNDI features used in the configuration, log messages, and parameters do not protect against attacker-controlled LDAP and other …

The total value of ransomware-related payments in just the first six months of 2021 ($590 million) exceeded all of 2020 ($416 million). Yet, even with the increasing impact of cyberattacks, 90 percent of security leaders still believe they’re falling short …

As the journey towards digital transformation continues, IT will leverage innovative technologies to transform the user experience and fuel competitive advantage

Cybersecurity has taken center stage. In the wake of attacks that have crippled business and threatened our daily lives, …

This is a guest blog post by Stephen Oh, Head of Global Sales, TrustKey.

With the pandemic, organizations have experienced an increase in hacking attacks, resulting in immense loss and damage for many businesses. One of the most effective …

This is a guest blog post by Shira Rubinoff, Cybersecurity Executive, Author and Advisor.

Organizations of all types and sizes, all around the world, are prioritizing secure distributed work models. This shift has been propelled by the growing adoption …

This is a guest blog post by Haichuan Hu, FIDO product manager, FEITIAN Technologies.

Passwords have always been a critical problem for online security. A simple password across multiple websites may lead to an account takeover, while complex passwords …

Hybrid and remote work have empowered employees, and with companies benefiting from this model, distributed work environments are here to stay. But what does that mean for security?

The rapid shift to new work models has expanded the attack surface …

Citrix and Chrome OS are joining forces to enable greater employee productivity through secure and seamless access to all your apps apps and the internet for all your employees everywhere, all while reducing the burden on IT. Chrome OS devices …

It’s no surprise that the traditional workplace has been turned upside down by COVID-19. Well over a year into large-scale remote work, it’s clear that leaders must prepare now for the long-term changes to business operations catalyzed by the pandemic.…

There have been many takeaways from our experience during the COVID-19 pandemic, but a key lesson is the importance of business resilience.

What is business resilience? It’s a holistic focus on ensuring that operations, technology, facilities, and people can survive …

This is a guest blog post by Natalie Zfat, a social media entrepreneur and Forbes Contributor who has partnered with some of the most iconic brands in the world. The post originally appeared here.

Don’t it always seem …

In the first blog post in our series on Secure Access Service Edge (SASE), we looked at the need for a unified approach to securing the hybrid workforce, the complex application landscape, and the rapidly expanding attack surface.

In …

Digital transformation, cloud adoption, and the expanding hybrid workforce have fundamentally changed the dynamics of the security and connectivity landscape. Businesses like yours rely on applications, and more employees than ever are using the internet and different types of …

Picture this: It’s 8:45 a.m. on a Tuesday, and you’ve just fired up your laptop. Within minutes you have 10 different browser tabs and apps open, including one for messaging, another for email, and another for the presentation you’ve been …

The healthcare industry has long been overburdened by slow-moving innovation due to the complexity of the medical ecosystem. Healthcare IT will tell you that healthcare is one of the most traditional industries and is averse to change. After all, it’s …

The scourge of ransomware has been wildly escalating, causing mayhem not just for companies, but for society. Witness the high-profile breaches impacting critical infrastructure while damaging trust relationships across healthcare, financial, retail, manufacturing, oil and gas, and other industries we …

This is a guest blog post by Dion Hinchcliffe, VP and Principal Analyst at Constellation Research.

With hindsight, it’s easy to look back and see how our workplaces and cultures could have been better prepared for a year like …

Across the Eastern Seaboard, millions of Americans experienced the consequences of compromised cybersecurity. Earlier this month a ransomware attack led to the shutdown of a section of one of the nation’s critical sources of fuel, resulting in gas shortages and …

As you look for ways to support a primarily remote workforce, it’s critical that you modernize your security architecture. Here’s how to choose the optimal security vendors.

As many as 36 million Americans could be working remote by 2025, according …

We’ve all heard the alarm bells ringing — organizations around the globe are suffering from a cybersecurity talent gap. While this is a great opportunity for our future leaders, organizations need to cope with the demands of increased cyber threats. …

Based on my conversations with enterprise IT teams, there seem to be a few high priority items that consistently feature on every IT team’s 2021 to-do list:

• Protecting home-based workers with full-featured security (beyond VPN)
• Enabling fast, local internet breakouts

This blog post was co-authored by Asit Mohapatra, Senior Product Manager.

There are two actors on a network — people and machines. People rely on usernames and passwords to identify themselves to machines so they can get access to networks …

This blog post is based on a webinar, ‘The Tension Between Effective Security and Employee Experience’, which can be viewed in full here. It is the sixth webinar in The New Workspace series. The event featured the insights of …

In my opinion, the greatest benefit of Citrix Workspace is that it enables our customers to provide their end users with a complete digital workspace from a single vendor. We call this the “platform approach” to workspace delivery.

Taking …

As part of Citrix’s recent research on Financial Institutions of the Future, we surveyed 45 C-level representatives from around the world. As head of financial services for Citrix in the UK and Ireland, I’ve seen firsthand the challenges our …

This is a guest blog post by Dion Hinchcliffe, Vice President and Principal Analyst at Constellation Research. This post originally appeared on the Constellation Research blog.

Over the last year, the world has undergone a true work revolution …

“Zero trust is not a product or a solution. Zero trust is the concept that trust between people and access must be constantly earned.”

That line comes from an insightful series of Citrix blog posts describing zero trust …

Under the best of circumstances, information security in healthcare is challenging. With HIPAA requirements guiding an organization’s operational policies and architectural designs, safeguarding protected health information (PHI) is a perpetual priority.

These are not the best of circumstances. With fallout …

This is a guest blog post from Citrix Ready partner Yubico.

Over the past few years, organizations have started to implement flexible work policies, empowering teams to work at home or in the office at their convenience. More recently, …

This is a guest blog post by Avishag Daniely, Director of Product Marketing, at Guardicore.

Remote working is powering the new normal, and virtual apps and desktops infrastructure is doing a great job of helping to facilitate that shift. …

With employees working from anywhere and everywhere in 2020, the COVID-19 pandemic has made security even more front of mind for IT leaders. It should be. After all, the attack surface has expanded because of an increasingly diverse number of …

Many organizations are training their employees how to recognize social engineering and how attackers will attempt to distribute malware to them. But research shows that even after a year of continuous security training for employees, the best possible result is …

Citrix is a proud platinum sponsor for the Check Point: <Secure> Virtual Summit US on Thursday, July 23, at 9 a.m. PT. Leading experts will discuss the impact of the global pandemic on cybersecurity vulnerabilities, risks, and strategies, showcasing what …

This blog post was co-authored by Peter Lefkowitz, Chief Privacy and Digital Risk Officer.

Security is one of our top priorities at Citrix, and we are committed to tackling security vulnerabilities to help keep our customers running smoothly. As part …

When the COVID-19 (coronavirus) pandemic hit, business continuity was top of mind for everyone. Even if you had a business continuity plan and extensive remote work capabilities, few would have imagined such a prolonged absence from traditional offices. Some companies …

As applications move to SaaS and cloud, it makes sense to have your branches connect directly to them via the local internet path. But, by intelligently routing traffic more directly via the internet, you could expose your organization to sophisticated …

The Citrix Application Delivery Controller (ADC) MPX 14000-FIPS 11.1 Platinum Edition, formerly known as NetScaler, has achieved certification to remain on the Department of Defense Information Network Approved Products List (DoDIN APL).

The purpose of the Approved Products List …

This is a guest blog post by Sharon Besser, VP Business Development, Guardicore.

In its whitepaper, The Rampant Growth of Cybercrime in Healthcare, health IT advisor organization Workgroup for Electronic Data Interchange (WEDI) reported that attacks on the …

The last year has seen digital transformation accelerate dramatically. The Citrix Ready Hybrid Multi-Cloud Program has been a big part of transforming workspace delivery, as infrastructure increasingly moves to the cloud. The public cloud has rapidly become ubiquitous, with …

When I was a student leader at my university’s chapter of the Society of Women Engineers (SWE), we always coveted the opportunity to attend the Grace Hopper Celebration. It’s the world’s largest annual gathering of women technologists, helping them …

As organizations move enterprise services and applications to the cloud, a larger segment of their user traffic is going to the internet. Users within enterprises are accessing internet websites and company’s resources as cloud services. The increasing sophistication of cybersecurity …

Zijn er nog mensen die echt iedere werkdag van 9 tot 5 op kantoor zitten? Jazeker. Wij hebben dat onderzocht, en voor een derde van de Nederlanders is dat heel gewoon. Maar de rest werkt geregeld buiten kantoor en de …

As organizations rapidly move forward with digital and cloud transformation, the most reliable indicators of the success of any solution involve the experiences of employees and customers. Positive experiences happen when performance and security come together. You could choose …

We have concluded our investigation into our previously disclosed security incident. I’d like to share an overview of our work, our major findings, and some of the steps we are taking to improve our security moving forward.

First, I …

The way employees work has changed a lot. For example, working from home is now the norm for many people, and there’s really no difference between working from an office desk, home, a coffee shop, or anywhere else with an …

Think back to your school days. I bet you can recall someone who shaped the course of your life. Maybe it was a teacher who inspired you to learn a foreign language and travel to new countries. Or a volunteer …

According to Information Age, a key IT trend for 2019 is the global shortage of cybersecurity skills in the workplace. In fact, in its 2019 IT Security Employment Outlook report, eSecurity Planet estimates there is a shortfall of …