Months-long exploitation of critical Citrix NetScaler bug reported

Tech companies, professional services organizations, and government entities have been subjected to attacks exploiting a critical information disclosure vulnerability in Citrix NetScaler Application Delivery Controller and NetScaler Gateway instances, tracked as CVE-2023-4966, since late August, or about two months prior to the release of a fix, reports The Register.

application application delivery application delivery controller attacks august bug citrix citrix netscaler companies controller critical cve delivery disclosure endpointdevice-security entities exploitation exploiting fix gateway government information information disclosure information disclosure vulnerability netscaler netscaler gateway organizations professional professional services register release reports security-staff-acquisition-development services tech the register vulnerability