Citrix ADC zero-day exploitatation: CISA releases details about attack on CI organization (CVE-2023-3519)

The exploitation of the Citrix NetScaler ADC zero-day vulnerability (CVE-2023-3519) was first spotted by a critical infrastructure organization, who reported it to the Cybersecurity and Infrastructure Security Agency (CISA). “In June 2023, threat actors exploited this vulnerability as a zero-day to drop a webshell on a critical infrastructure organization’s non-production environment NetScaler ADC appliance. The webshell enabled the actors to perform discovery on the victim’s active directory (AD) and collect and exfiltrate AD data. The … More →

The post …

0 day adc agency attack cisa citrix citrix adc critical critical infrastructure cve cybersecurity don't miss exploitation exploited greynoise hot stuff incident response infrastructure infrastructure security june june 2023 netscaler organization releases security threat threat actors vulnerability webshell zero-day zero-day vulnerability