#citrixbleed — Public Fediverse posts

#Citrix Urges Patching Critical NetScaler Vulnerabilities CVE-2026-3055 & CVE-2026-4368 Allowing Unauthenticated Data Leaks. This looks like another incarnation of #CitrixBleed!

Defenders need to act quickly. Patch Now!
👇
https://thehackernews.com/2026/03/citrix-urges-patching-critical.html

#CitrixBleed2: Kritische Netscaler-Lücke wird seit fast einem Monat ausgenutzt | Security https://www.heise.de/news/Citrix-Bleed-2-Kritische-Netscaler-Luecke-wird-seit-fast-einem-Monat-ausgenutzt-10492320.html #Patchday #CyberCrime #DataLeak #Datenleck #Datenschutz #privacy #CitrixBleed

Perhaps the EU should only allow Tailscale like VPN's for remote connectivity... #citrixbleed

GreyNoise observed exploitation of CitrixBleed 2 (CVE-2025-5777) nearly two weeks before a public PoC was released. Full breakdown: https://www.greynoise.io/blog/exploitation-citrixbleed-2-cve-2025-5777-before-public-poc #GreyNoise #ThreatIntel #CitrixBleed #Citrix #NetScaler

Critical #CitrixBleed 2 #vulnerability has been under active #exploit for weeks

A critical vulnerability allowing #hackers to bypass #multifactor #authentication in network management devices made by #Citrix has been actively #exploited for more than a month, researchers said. The finding is at odds with advisories from the vendor saying there is no evidence of in-the-wild #exploitation.
#security #privacy

https://arstechnica.com/security/2025/07/critical-citrixbleed-2-vulnerability-has-been-under-active-exploit-for-weeks/

This Week in Security: Bitchat, CitrixBleed Part 2, Opossum, and TSAs - @jack is back with a weekend project. Yes, that Jack. [Jack Dorsey] spent last wee... - https://hackaday.com/2025/07/11/this-week-in-security-bitchat-citrixbleed-part-2-opossum-and-tsas/ #thisweekinsecurity #hackadaycolumns #securityhacks #citrixbleed #bitchat #opossum #mcp

Critical CitrixBleed 2 vulnerability has been under active exploit for weeks - A critical vulnerability allowing hackers to bypass multifac... - https://arstechnica.com/security/2025/07/critical-citrixbleed-2-vulnerability-has-been-under-active-exploit-for-weeks/ #vulnerabilities #citrixbleed #security #hacking #biz⁢ #citrix

"CitrixBleed 2": #Citrix #Netscaler-Lücken gravierender | Security https://www.heise.de/news/CitrixBleed-2-Citrix-Netscaler-Luecken-gravierender-10460208.html #CitrixNetscaler #CitrixBleed #CitrixBleed2 #Patchday

‘CitrixBleed 2’ Shows Signs of Active Exploitation – Source: www.darkreading.com https://ciso2ciso.com/citrixbleed-2-shows-signs-of-active-exploitation-source-www-darkreading-com/ #rssfeedpostgeneratorecho #DarkReadingSecurity #CyberSecurityNews #CitrixBleed' #DARKReading

CitrixBleed 2 Vulnerability Exploited, Recalling Earlier CitrixBleed Fallout – Source: www.infosecurity-magazine.com https://ciso2ciso.com/citrixbleed-2-vulnerability-exploited-recalling-earlier-citrixbleed-fallout-source-www-infosecurity-magazine-com/ #rssfeedpostgeneratorecho #InfoSecurityMagazine #InfosecurityMagazine #CyberSecurityNews #CitrixBleed'

Prior recaps on #CitrixBleed and LockBit by me: https://doublepulsar.com/lockbit-ransomware-group-assemble-strike-team-to-breach-banks-law-firms-and-governments-4220580bfcee

https://doublepulsar.com/mass-exploitation-of-citrixbleed-vulnerability-including-a-ransomware-group-1405cbb9de18

https://doublepulsar.com/what-it-means-citrixbleed-ransom-group-woes-grow-as-over-60-credit-unions-hospitals-47766a091d4f

The Boeing #CitrixBleed incident led to a $200m ransom demand: https://cyberscoop.com/boeing-confirms-attempted-200-million-ransomware-extortion-attempt/

UnitedHealth hackers used stolen Citrix credentials, CEO says⤵️
#UnitedHealth #databreach #cyberattack #Citrixbleed #cybersecurity #infosec

https://cnews.link/unitedhealth-hack-exploits-citrix-bug/

Another #CitrixBleed, this one from mid November. 200k people impacted. HT @euroinfosec

https://apps.web.maine.gov/online/aeviewer/ME/40/5f9aa393-9c7a-49e0-855f-5e36adfb9e6c.shtml

#MOVEit, #Capita, #CitrixBleed and more: The biggest #data #breaches of #2023

Hackers had a busy year exploiting popular file-transfer tools and targeting under-resourced organizations

https://techcrunch.com/2023/12/27/moveit-capita-citrixbleed-biggest-data-breaches-2023/

The Church of Sweden(Svenska Kyrkan) was ransomwared on the 23rd of November. This is now being attributed to BlackCat.

Here's a #Citrixbleed vulnerable server serving a wildcard cert for *.svenskakyrkan.se, last scanned by Shodan on the 23rd. Probably not related at all

#CitrixBleed erst nach zwei Wochen gepatcht: 36 Millionen Kundendaten abgegriffen | Security https://www.heise.de/news/CitrixBleed-erst-nach-zwei-Wochen-gepatcht-36-Millionen-Kundendaten-abgegriffen-9579227.html

Like I always say, update yo stuff!

Comcast held a virtual door open for thieves to steal data - Desk Chair Analysts

https://dcanalysts.net/comcast-held-a-virtual-door-open-for-thieves-to-steal-data/

#Citrix #CitrixBleed #Comcast #InfoSec #Security #Xfinity #TechNews #DCA

#Comcast Xfinity data breach affects over 35 million people

A #CitrixBleed fatality.

Data accessed includes customer usernames and hashed* passwords. Xfinity is forcing password changes next time you sign into an account.

In some cases data accessed may include:

- Last 4 of SSN
- DOBs
- Secret Questions / Answers exposed

#cybersecurity #security #infosec #xfinity

https://www.theverge.com/2023/12/18/24007082/xfinity-data-breach-hack-notice-citrix

Xfinity waited 13 days to patch critical Citrix Bleed 0-day. Now it’s paying the price - Enlarge / A Comcast Xfinity service van in San Ramon, California on Feb... - https://arstechnica.com/?p=1992160 #networkbreach #citrixbleed #security #comcast #xfinity #biz&it

#Comcast has disclosed a #CitrixBleed-related data breach which affected 35 million #Xfinity customers. The impacted info included names, contact information, last four digits of social security numbers, dates of birth and secret questions and answers.

@GossiTheDog

https://apps.web.maine.gov/online/aeviewer/ME/40/49e711c6-e27c-4340-867c-9a529ab3ca2c.shtml

CTS, a cloud provider for legal firms in the UK, who were late patching #CitrixBleed, have appeared on Cactus ransomware's portal today.

They're offering downloads of CTS customer data. #threatintel

Two days left to patch those Netscalers against #Citrixbleed before you're on change freeze for a month!

Great take on HHS's #CitrixBleed alert in a recent edition of SANS NewsBites.

Supply-chain ransomware attack causes outages at over 60 credit unions – Source: www.tripwire.com https://ciso2ciso.com/supply-chain-ransomware-attack-causes-outages-at-over-60-credit-unions-source-www-tripwire-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #grahamcluleycom #Vulnerability #CitrixBleed' #Grahamcluley #DataBreach #ransomware #Guestblog #Dataloss #Malware

Supply-chain ransomware attack causes outages at over 60 credit unions https://www.tripwire.com/state-of-security/supply-chain-ransomware-attack-causes-outages-over-60-credit-unions #Vulnerability #vulnerability #CitrixBleed #Ransomware #databreach #ransomware #Guestblog #Dataloss #Malware