Citrix Bleed widely exploitated, warn government agencies

In a joint cybersecurity advisory, the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI), along with other international agencies, warn that ransomware gangs are actively exploiting the Citrix Bleed vulnerability.

Affiliates of at least two ransomware groups, LockBit and Medusa, have been observed exploiting Citrix Bleed as part of attacks against organizations. Both are globally significant, and were ranked as the first and sixth most active groups in our November ransomware review.

Known …

advisory agency bureau cisa citrix citrix bleed cybersecurity cybersecurity advisory exploiting fbi federal federal bureau of investigation gangs government government agencies infrastructure infrastructure security international investigation lockbit medusa ransomware ransomware gangs ransomware groups security vulnerability