Citrix

Cybersecurity fears drive a return to on-premise infrastructure from cloud computing

February 22, 2024

42% of organizations surveyed in the US are considering or already have moved at least half of their cloud-based workloads back to on-premises infrastructures, a phenomenon …

Citrix Bleed leveraged to steal data of 35+ million Comcast Xfinity customers

December 20, 2023

Telecommunications company Comcast has confirmed a breach that exposed personal information of more than 35.8 million of Xfinity customers. Exploiting Citrix Bleed to breach …

How LockBit used Citrix Bleed to breach Boeing and other targets

November 22, 2023

CVE-2023-4966, aka “Citrix Bleed”, has been exploited by LockBit 3.0 affiliates to breach Boeing’s parts and distribution business, and “other trusted …

Chinese multinational bank hit by ransomware

November 10, 2023

The state-owned Industrial and Commercial Bank of China (ICBC), which is one of the largest banks in the world, has been hit by a ransomware attack that led to disrupted …

Citrix Bleed: Mass exploitation in progress (CVE-2023-4966)

October 30, 2023

CVE-2023-4966, aka “Citrix Bleed”, a critical information disclosure vulnerability affecting Citrix NetScaler ADC/Gateway devices, is being massively exploited by …

Citrix NetScaler bug exploited in the wild since August (CVE-2023-4966)

October 18, 2023

A recently patched Citrix NetScaler ADC/Gateway information disclosure vulnerability (CVE-2023-4966) has been exploited by attackers in the wild since late August 2023, …

Ransomware group exploits Citrix NetScaler systems for initial access

August 29, 2023

A known threat actor specializing in ransomware attacks is believed to be behind a recent campaign that targeted unpatched internet-facing Citrix NetScaler systems to serve as …

Citrix ShareFile vulnerability actively exploited (CVE-2023-24489)

August 17, 2023

CVE-2023-24489, a critical Citrix ShareFile vulnerability that the company has fixed in June 2023, is being exploited by attackers. GreyNoise has flagged on Tuesday a sudden …

(Re)check your patched NetScaler ADC and Gateway appliances for signs of compromise

August 16, 2023

Administrators of Citrix NetScaler ADC and Gateway appliances should check for evidence of installed webshells even if they implemented fixes for CVE-2023-3519 quickly: A …

Downfall attacks can gather passwords, encryption keys from Intel processors

August 9, 2023

A variety of Intel Core processors and the devices using them are vulnerable to “Downfall”, a new class of attacks made possible by CVE-2022-40982, which enables …

Citrix expands cloud and on-premises capabilities to support the needs of hybrid customers

July 28, 2023

Citrix announced expanded capabilities for its cloud and on-premises solutions for the hybrid world. As part of this expansion, Desktop-as-a-Service (DaaS) and virtual desktop …

Citrix ADC zero-day exploitation: CISA releases details about attack on CI organization (CVE-2023-3519)

July 21, 2023

The exploitation of the Citrix NetScaler ADC zero-day vulnerability (CVE-2023-3519) was first spotted by a critical infrastructure organization, who reported it to the …