Citrix Bleed leveraged to steal data of 35+ million Comcast Xfinity customers

Telecommunications company Comcast has confirmed a breach that exposed personal information of more than 35.8 million of Xfinity customers. Exploiting Citrix Bleed to breach Xfinity CVE-2023-4966 (aka Citrix Bleed) – an information disclosure vulnerability in Citrix NetScaler ADC/Gateway devices – was disclosed on October 10, when Citrix issued a patch to fix the vulnerability. (CVE-2023-4966 has been exploited as a zero-day by attackers since late August 2023, and

The post Citrix Bleed leveraged to steal data of 35+ million Comcast Xfinity customers appeared first on Help Net Security.

This article has been indexed from Help Net Security

Read the original article: