Citrix Devices Under Attack: NetScaler Flaw Exploited to Capture User Credentials
Citrix Devices Under Attack: NetScaler Flaw Exploited to Capture User Credentials
10 October 2023
A recently disclosed critical flaw in Citrix NetScaler ADC and Gateway devices is being exploited by threat actors to conduct a credential harvesting campaign.
IBM X-Force, which uncovered the activity last month, said adversaries exploited "CVE-2023-3519 to attack unpatched NetScaler Gateways to insert a malicious script into the HTML content of the authentication web page to capture user