Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Live incidents

Dec 6, 2023

0 new incidents, 1 with updates.

Updated

  • ClosedPatched

    Xfinity breach via Citrix Bleed: 35.9M customers

    Comcast's Xfinity said attackers used Citrix Bleed (CVE-2023-4966) on its NetScaler devices between Oct 16 and 19, 2023, before mitigation, and took usernames and hashed passwords. Some customers also lost names, contact details, last four SSN digits, birth dates and security questions. A Maine filing put the count at 35,879,455.

    Xfinity (Comcast)Closed Dec 18, 2023