Kiteworks and Citrix Zero-Day Incidents Highlight Vendor Response Challenges

Two separate zero-day incidents involving Kiteworks and Citrix demonstrated different vendor response approaches to security vulnerabilities. Kiteworks instructed customers to power down its data-protection platform during a nine-hour window. Citrix remained silent about reported attacks on its product before releasing a patch. The incidents highlight the challenges companies face when responding to zero-day vulnerabilities.