Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Daniel Messing
Mitigating CitrixBleed 2 (CVE‑2025‑5777) NetScaler Memory Disclosure with App & API Protector
Even if you patched your affected devices quickly, it’s important to check for exposure now that the proof of concept has been made public. On Friday, July 4, 2025, exploit details were publicly disclosed for a memory disclosure vulnerability affecting Citrix NetScaler ADC and Gateway devices. This is a pre-authentication flaw that allows attackers to craft malicious requests that leak uninitialized memory from affected NetScaler devices.
Protect Client-Side Code and Certify the Authenticity of Data Collection
The code may be difficult to read and decipher, but one can often infer its purpose by examining the output and the data collected and sent. Some of the information sent to the server may be obvious, especially regarding details such as device and browser characteristics. However, it would be more difficult to infer the intent for functions that simply return a boolean, or for an integrity check function that returns an integer.
Cryptominers’ Anatomy: Shutting Down Mining Botnets
By executing “bad shares,” we were able to ban the mining proxy from the network — shutting down the mining operation. Welcome to the final installment of our Cryptominers’ Anatomy blog series: In our first post, we discussed cryptocurrencies' fundamentals, their various attributes, and what makes some of them more attractive than others to threat actors. In the second part, we analyzed various cryptomining samples that we found abusing different mining topologies.
Cryptominers’ Anatomy: Cryptomining Internals
Cryptominers, or cryptojackers, are a type of malware that exploits the victim's resources for profit by mining cryptocurrency. In contrast to the usual use of cryptocurrency by attackers as a payment method, cryptominers use the fundamental base of the cryptocurrency, which is the blockchain mining operation, to generate financial gain. Cryptocurrency was originally designed as a borderless, decentralized way to transfer money and detach from traditional banking systems.
Active Exploitation: New Aquabot Variant Phones Home
The Akamai Security Intelligence and Response Team (SIRT) has identified a new variant of the Mirai-based malware, Aquabot, that is actively attempting to exploit Mitel SIP phones. As this is the third distinct iteration of Aquabot, we have dubbed it Aquabotv3. The malware exploits CVE-2024-41710, a command injection vulnerability that affects Mitel models.
Exploit Me, Baby, One More Time: Command Injection in Kubernetes Log Query
If you haven’t patched this vulnerability yet, it’s a good idea to prioritize this one. Editorial and additional commentary by Tricia Howard Akamai security researcher Tomer Peled recently discovered a vulnerability in Kubernetes that was assigned CVE-2024-9042. The vulnerability allows remote code execution (RCE) with SYSTEM privileges on all Windows endpoints within a Kubernetes cluster.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Daniel
Contact Daniel, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack