Threat Actors Exploit Citrix Netscaler ADC and Gateway Flaw

Threat actors are exploiting a recently disclosed vulnerability in Citrix Netscaler ADC and Gateway appliances in order to target professional services, technology and government organizations.

The critical-severity flaw (CVE-2023-4966) was first disclosed by Citrix on Oct. 10, when the company released patches. Mandiant researchers on Tuesday said that they identified zero-day exploitation of the flaw in the wild starting in late August; additionally, Citrix updated its advisory on Tuesday to state that exploits have been observed. According to Citrix, the …

adc citrix citrix netscaler citrix netscaler adc critical cve exploit exploiting flaw gateway government mandiant netscaler netscaler adc order organizations patches professional professional services researchers services severity target technology the company threat threat actors tuesday vulnerability zero-day