Securing our ports of entry. Read more in The Triage Group newsletter.

October 27, 2023

Security: Citrix Bleed exploit lets hackers hijack NetScaler accounts

BleepingComputer

A proof-of-concept (PoC) exploit is released for the 'Citrix Bleed' vulnerability, tracked as CVE-2023-4966, that allows attackers to retrieve authentication session cookies from vulnerable Citrix NetScaler ADC and NetScaler Gateway appliances.

CVE-2023-4966 is a critical-severity remotely exploitable information disclosure flaw Citrix fixed on October 10 without providing many details.

On October 17, Mandiant revealed that the flaw was abused as a zero-day in limited attacks since late August 2023. Read More

Healthcare IT: Cleveland Clinic, IBM to lead new quantum computing for health projects

Healthcare IT News

The Wellcome Trust has selected the Cleveland Clinic-IBM Discovery Accelerator to develop proof-of-concept demonstrations of quantum computing for biologic and health applications through the Wellcome Leap Quantum for Bio Challenge.

WHY IT MATTERS

Q4Bio by Wellcome Leap, a U.S.- based nonprofit organization aiming to accelerate and increase the number of breakthroughs in global health, seeks to codevelop health applications that demonstrate benefit from the use of quantum computers and are expected to emerge over the next three to five years. Read More

Homeland Security: Securing our ports of entry, one scan (or thousands) at a time

DHS Science and Technology News Room

Multi-Energy Portals have shown recent success in increased volume and efficiency of cargo scanning at U.S. ports of entry—including an August 2023 $1.5 million drug seizure in Santa Teresa, New Mexico.

Every year, millions of cargo containers make their way to U.S. ports of entry (POE) via maritime, roadways, and railways. According to U.S. Customs and Border Protection (CBP), more than 100,000 commercial cargo trucks cross U.S. POEs daily. Tasked with securing and maintaining the integrity of the nation’s borders, CBP is responsible for ensuring that all cargo is fit to cross U.S. borders—that is, free of illegal contraband. To combat the threat of human and drug trafficking, it is imperative that their methods for cargo screening and physical examination are as thorough as they are efficient. Read More

Transportation: Ports consider digitization strategies to track cargo

Transport Topics

AURORA, Colo. — Ports and shippers are exploring ambitious port digitization and tracking system projects that allow stakeholders across the supply chain to track cargo in real time from a departure port in Asia and across the Pacific Ocean, through a port of entry and finally onto a truck or railcar for delivery.

“We’re riding a newly formed crest of interest and dedication to ports, and now as we enter the next era of digitization and decarbonization, there is a lot more we want to accomplish,” said newly minted American Association of Port Authorities President Cary Davis. Read More

Human Resources: A running list of states and localities that regulate AI in hiring

HR Dive

Artificial intelligence is already disrupting operations across swaths of industries, and HR is no exception.

AI’s use cases in the HR space are evolving rapidly, from filtering and tracking job candidates to generating internal communications and analyzing facial expressions during video interviews. But it’s the use of AI in hiring that is drawing particular attention from regulators.

In 2023, New York City passed the nation’s first-ever law requiring employers to conduct annual bias audits of automated employment decision-making tools. Months later, the U.S. Equal Employment Opportunity Commission issued guidance for employers about how to audit AI for employment discrimination. Read More

Business & Technology: 3 commandments that should drive every API strategy

CIO

In the early 2000s, companies like Amazon, eBay, and Salesforce drove a trend toward standardizing interfaces among web applications. The result was a complete overhaul of how applications were developed and integrated, thanks to a growing network of open web APIs that anyone could consume.

During this period, Amazon founder Jeff Bezos wrote a memo to his employees that came to be known as the “Bezos API Mandate.” According to secondary sources, this mandate included two strategic requirements that any IT leader should consider when seeking to maximize the value of their development teams’ efforts. Read More

The Triage Group | (202) 904-2344 | The Triage Group, LLC.

700 12th Street, NW, Suite 700, Washington, DC 20005 | www.triagegroup.com