CitrixBleed Vulnerability Exploited by Criminal and Nation-State Groups

Criminal and nation-state groups are exploiting a critical vulnerability in Citrix Netscaler ADC and Netscaler Gateway, known as CitrixBleed, to launch attacks. The vulnerability has led to the exfiltration of sensitive data from Boeing's parts and distribution unit. CISA and the FBI have notified organizations running vulnerable instances of the devices and have recommended mitigation measures before they are attacked. The wave of exploitation activity has been opportunistic, targeting the biggest organizations and vulnerable servers first.