After a hacker attack and death: BSI warns of vulnerabilities in Citrix VPN products
After a patient died in a hacker attack on the Düsseldorf University Hospital, the BSI is now warning of further attacks and a vulnerability in Citrix VPN products. The vulnerability has been known since the beginning of the year and was now used by hackers to attack the University Clinic in Düsseldorf (UKD). For a patient there, any help came too late, as the system did not work after the attack with ransomware and the emergency patient could not be brought to the university clinic, but had to be redirected to Wuppertal. The vulnerability (CVE-2019-19781) has been known since January 2020 and has still not been closed in Citrix VPN products. Because even before the security updates that were made available in January 2020 were installed, their technology was compromised and attackers still have access to the system even after (!) The security gap has been closed. "We warned of the vulnerability back in January and pointed out the consequences of its exploitation. Attackers ga...