Session Hijacking
Security incidents tagged Session Hijacking. Newest first.
0 Session Hijacking incidents in the last 12 months
- Incidents
- 2
- Live
- 0
- Patched
- 2
- Days without an incident
- 1108
- Longest quiet run: 1039 days (Dec 19–Oct 22)
Show 2 older incidents2 older incidents
October 2023 1
- CriticalPatched
Citrix Bleed: NetScaler session token leak (CVE-2023-4966)
A memory leak in NetScaler ADC and Gateway let attackers read session tokens and hijack logged-in sessions, bypassing passwords and MFA. It was exploited as a zero-day from late August 2023, then widely by LockBit affiliates. Victims included Xfinity (35.9M users).
Citrix NetScaler ADC and NetScaler GatewayClosed Nov 21, 2023
September 2023 1
- HighNo fix needed
Okta support system breach: HAR files with session tokens stolen
An attacker used a stolen service account to get into Okta's customer support system and download files from 134 customers. Some were HAR files with live session tokens, which were used to hijack the Okta sessions of 5 customers, including BeyondTrust, Cloudflare and 1Password. Okta later found the attacker also downloaded the names and emails of all support system users.
Okta Help Center (customer support system)Closed Nov 29, 2023
