Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Live incidents

Jun 26, 2025

0 new incidents, 1 with updates.

Updated

  • ClosedPatched

    CitrixBleed 2: NetScaler memory leak exploited to hijack sessions

    An out-of-bounds read in NetScaler ADC and Gateway leaked memory, including session tokens, to unauthenticated attackers. GreyNoise saw exploitation from June 23, before public PoCs on July 4. After patching, admins had to kill all active ICA, PCoIP, RDP, AAA and LB sessions.

    Citrix NetScaler ADC and GatewayClosed Jul 10, 2025