Citrix Bleed: NetScaler session token leak (CVE-2023-4966) · updates https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966 A memory leak in NetScaler ADC and Gateway let attackers read session tokens and hijack logged-in sessions, bypassing passwords and MFA. It was exploited as a zero-day from late August 2023, then widely by LockBit affiliates. Victims included Xfinity (35.9M users). en Mon, 18 Dec 2023 00:00:00 GMT Citrix Bleed: NetScaler session token leak (CVE-2023-4966): Xfinity discloses that Citrix Bleed exploitation on Oct 16–19 exposed data on 35.9M customers https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966 https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966#2023-12-18-4f6b5f47 Mon, 18 Dec 2023 00:00:00 GMT critical <p><a href="https://www.theverge.com/2023/12/18/24007082/xfinity-data-breach-hack-notice-citrix">Source</a></p> Citrix Bleed: NetScaler session token leak (CVE-2023-4966): CISA, FBI, MS-ISAC and ACSC warn that LockBit 3.0 affiliates are exploiting Citrix Bleed (AA23-325A) https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966 https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966#2023-11-21-c3bd0a0c Tue, 21 Nov 2023 00:00:00 GMT critical <p><a href="https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-325a">Source</a></p> Citrix Bleed: NetScaler session token leak (CVE-2023-4966): Citrix issues additional mitigation guidance https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966 https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966#2023-10-23-06b0c391 Mon, 23 Oct 2023 00:00:00 GMT critical <p><a href="https://assets.xfinity.com/assets/dotcom/learn/Notice%20To%20Customers%20of%20Data%20Security%20Incident.pdf">Source</a></p> Citrix Bleed: NetScaler session token leak (CVE-2023-4966): CISA adds CVE-2023-4966 to the KEV catalog https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966 https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966#2023-10-18-0b649663 Wed, 18 Oct 2023 00:00:00 GMT critical <p>Citrix Bleed: NetScaler session token leak (CVE-2023-4966): CISA adds CVE-2023-4966 to the KEV catalog</p> Citrix Bleed: NetScaler session token leak (CVE-2023-4966): Mandiant reports zero-day exploitation since late August 2023 and session hijacking that survives patching https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966 https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966#2023-10-17-98e819bc Tue, 17 Oct 2023 00:00:00 GMT critical <p><a href="https://cloud.google.com/blog/topics/threat-intelligence/session-hijacking-citrix-cve-2023-4966">Source</a></p> Citrix Bleed: NetScaler session token leak (CVE-2023-4966): Citrix publishes bulletin CTX579459 and fixed builds https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966 https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966#2023-10-10-4865aa55 Tue, 10 Oct 2023 00:00:00 GMT critical <p><a href="https://support.citrix.com/external/article/CTX579459/netscaler-adc-and-netscaler-gateway-secu.html">Source</a></p>