The exploitation of vulnerabilities targeting remote access technologies to gain initial access is continuing relentlessly also during 2025, with initial access brokers, and in general opportunistic and targeted threat actors, quite active in leveraging software flaws to break into organizations.| HACKMAGEDDON
Citrix is back with vulnerability news no one wanted. CitrixBleed2 is affecting Citrix NetScaler ADC and Gateway devices between versions 14.1 and 47.46. Exploitation of CVE-2025-5777 can lead to unauthenticated attackers extracting session tokens directly from memory. These tokens can grant full access to user sessions, even if multi-factor authentication (MFA) is enabled. This flaw […]| Project Hyphae