The American Cyber Security Agency CISA says hackers are actively exploiting a significant-rated security defects in a widely used Citrix product, and have given other federal government departments just one day to patch their system.
Safety researcher Bug “Citrix bleed 2” dubbed For equality of 2023 security defects in Citrix Netscaler, a networking product that rely on large companies and governments to allow its employees to reach the app and other resources from far away on their internal networks. much like Earlier bugCitrix Bleed 2 can be exploited from far away to extract sensitive credentials from an affected Netscaler device, allowing hackers to wide access to the company’s broad network.
In A warning on ThursdaySisa said that there is evidence that the bug was being actively used in hacking operations, which was adding Research And conclusion Pointing to widespread exploitation, some reporting hack with dating As far as mid -JuneAkamai said that earlier this week, he saw “rigid growth” in efforts to scan the Internet for the affected equipment following details of exploitation.
The CISA stated that the Netscaler bug produces a “significant risk” for the federal government system, and ordered federal government agencies to patch any citrics device affected by bug until Friday.
For its share, Citrix has not yet accepted that vulnerability is being exploited. Company Security advisor Customers urge to update the equipment affected as soon as possible.
Citrix representatives did not respond to Techcrunch’s request for comments.
