Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Live incidents

Oct 17, 2023

0 new incidents, 1 with updates.

Updated

  • ClosedPatched

    Citrix Bleed: NetScaler session token leak (CVE-2023-4966)

    A memory leak in NetScaler ADC and Gateway let attackers read session tokens and hijack logged-in sessions, bypassing passwords and MFA. It was exploited as a zero-day from late August 2023, then widely by LockBit affiliates. Victims included Xfinity (35.9M users).

    Citrix NetScaler ADC and NetScaler GatewayClosed Nov 21, 2023