Citrix
watchTowr also credited after letting “our small pets walk across our keyboard, and watching what happens.”
"Publishing security advisories for such critical issues with such limited information only serves to hurt defenders and threat hunters"
Exploits date back as early as June 23...
Hey criminals! Fire an HTTP GET request. Grab system memory including session cookies issued post-authentication. Don't worry about logs. Pillage and loot. Thanks, Citrix.
You filthy animals are **** at network architecture, and it may be "necessary to expand threat hunting" says NCSC.
Here's what you need to do to reduce the threat posed by CVE-2023-4966. But don't delay.