Citrix warns of NetScaler zero-days being exploited in attacks

Summarised from 2 outlets · Updated 29 Sept, 22:37 · Archive

Citrix has disclosed two previously unknown security flaws in NetScaler that are being actively exploited.

Citrix has released a fix for two zero-day vulnerabilities in its NetScaler product that are being exploited in attacks against government agencies, banks and professional services firms. Custom malware has been used in the attacks. The company has urged organisations to patch immediately, though The Register raises questions about the identity of those conducting the attacks and why Citrix delayed disclosure.

How it is being reported

• Custom malware used in Citrix 0-day attacks targeting govt, banks, professional servicesThe Register · 29 Sept, 18:49
• Citrix says two worrying NetScaler RCE zero-days exploited in attacksTechRadar · 28 Sept, 16:10

In this story: Citrix · NetScaler

This summary was written by AI from the headlines and standfirsts above, and states as fact only what at least two outlets report. How we use AI · Report a problem