Back

As of writing this toot, over 5000 orgs still haven’t patched #CitrixBleed.

It allows complete, easy bypass of all forms of authentication and is being exploited by ransomware groups. It is as simple as pointing and clicking your way inside orgs - it gives attackers a fully interactive Remote Desktop PC the other end.

How to locate, patch and investigate #CitrixBleed exploitation: https://doublepulsar.com/mass-exploitation-of-citrixbleed-vulnerability-including-a-ransomware-group-1405cbb9de18

#CitrixBleeds allows you to be this cat.