Tonic Blog

In recent years, cybersecurity has gone from being a specialist concern to one of the most pressing issues in the boardroom. Executives and directors are increasingly expected to understand and oversee cyber risk with the same diligence they apply to financial, operational, and strategic risks.

I have been waiting to write this blog post for over 8 years now. For most of the past decade, my co-founder Sharon and I have helped companies all over the world, from Fortune 500 companies to critical infrastructures to crypto currency exchanges, recover from devastating attacks that crippled their operations and threatened to shut them down for good.

Citrix/NetScaler disclosed a critical memory overflow in NetScaler ADC/Gateway (CVE-2025-7775) that is actively exploited. There are no mitigations - you must upgrade to fixed builds and hunt for signs of compromise on any instance meeting the vendor’s pre-conditions.

Today's cybersecurity landscape is overwhelming. Organizations face millions of potential vulnerabilities, misconfigurations, and hidden risks that traditional vulnerability management tools struggle to address.