Widespread exploitation of Citrix Bleed flaw ongoing

Attacks leveraging the Citrix Bleed vulnerability, tracked as CVE-2023-4966, impacting Citrix NetScaler ADC and NetScaler Gateway appliances were noted by Cybersecurity and Infrastructure Security Agency Assistant Director for Cybersecurity Eric Goldstein to have been conducted by both state-sponsored threat operations and cybercrime groups, according to The Record, a news site by cybersecurity firm Recorded Future.

adc agency assistant attacks citrix citrix bleed citrix netscaler citrix netscaler adc cve cve-2023-4966 cybercrime cybersecurity director eric goldstein exploitation flaw gateway infrastructure infrastructure security netscaler netscaler adc netscaler gateway noted operations ransomware record security sponsored state the record threat threat intelligence threat operations vulnerability vulnerability management