LockBit
Security incidents tagged LockBit. Newest first.
0 LockBit incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 1108
- Longest quiet run: 1039 days (Dec 19–Oct 22)
Show 2 older incidents2 older incidents
October 2023 1
- CriticalPatched
Citrix Bleed: NetScaler session token leak (CVE-2023-4966)
A memory leak in NetScaler ADC and Gateway let attackers read session tokens and hijack logged-in sessions, bypassing passwords and MFA. It was exploited as a zero-day from late August 2023, then widely by LockBit affiliates. Victims included Xfinity (35.9M users).
Citrix NetScaler ADC and NetScaler GatewayClosed Nov 21, 2023
April 2023 1
CriticalPaperCut MF/NG auth bypass to SYSTEM RCE, used by Cl0p and LockBit (CVE-2023-27350)Patched
PaperCut MF and PaperCut NG Patched
An improper access control bug in PaperCut NG/MF print management let unauthenticated attackers run code as SYSTEM. Fixes had shipped in March 2023, but unpatched servers were exploited from April. Microsoft linked it to Cl0p (Lace Tempest) and LockBit, and the Bl00dy gang hit schools with it.
Open incident →CVE-2023-27350
