Approximately 2000 Citrix NetScaler servers were backdoored in massive campaignSecurity Affairs·Aug 16, 07:20 UTC · Aug 16, 2023Malware in the wildCVE-2023-351960
Citrix ADC zero-day exploitation: CISA releases details about attack on CI organization (CVE-2023-3519)Help Net Security·Jul 24, 09:30 UTC · Jul 24, 2023Exploit / PoC in the wildCVE-2023-3519160
Shadowserver reported that +15K Citrix servers are likely vulnerable to attacks exploiting the flaw CVE-2023Security Affairs·Jul 23, 13:49 UTC · Jul 23, 2023Exploit / PoC in the wildCVE-2023-351960
Citrix NetScaler zero-day exploited in the wild, patch is available (CVE-2023-3519)Help Net Security·Jul 21, 11:15 UTC · Jul 21, 2023Exploit / PoC in the wildCVE-2023-3519CVE-2023-3466CVE-2023-3467+2 CVEs60
Hackers already installed web shells on 581 Citrix servers in CVE-2023Security Affairs·Aug 2, 20:50 UTC · Aug 2, 2023Exploit / PoC in the wildCVE-2023-351960
CISA warns of attacks against Citrix NetScaler ADC and Gateway DevicesSecurity Affairs·Jul 21, 20:01 UTC · Jul 21, 2023Advisory in the wildCVE-2023-351960
Large-scale Citrix NetScaler Gateway credential harvesting campaign exploits CVE-2023Security Affairs·Oct 9, 22:02 UTC · Oct 9, 2023Threat actor in the wildCVE-2023-351960
FIN8-linked actor targets Citrix NetScaler systemsSecurity Affairs·Aug 29, 15:14 UTC · Aug 29, 2023RansomwareCVE-2023-351960
(Re)check your patched NetScaler ADC and Gateway appliances for signs of compromiseHelp Net Security·Aug 16, 00:00 UTC · Aug 16, 2023VulnerabilityCVE-2023-351960
Ransomware group exploits Citrix NetScaler systems for initial accessHelp Net Security·Aug 29, 00:00 UTC · Aug 29, 2023Ransomware in the wildCVE-2023-351960
CISA, experts warn of Citrix vulnerabilities being exploited by hackersThe Record·Aug 16, 21:19 UTC · Aug 16, 2023VulnerabilityCVE-2023-24489CVE-2023-351947
Nearly 2,000 Citrix NetScaler Instances Hacked via Critical VulnerabilityThe Hacker News·Aug 15, 00:00 UTC · Aug 15, 2023Vulnerability in the wildCVE-2023-351960
Week in review: VirusTotal data leak, Citrix NetScaler zero-day exploitationHelp Net Security·Jul 23, 00:00 UTC · Jul 23, 2023Exploit / PoC in the wildCVE-2023-3519CVE-2023-29298CVE-2023-38203+3 CVEs60
Zero-Day Attacks Exploited Critical Vulnerability in Citrix ADC and GatewayThe Hacker News·Jul 22, 03:57 UTC · Jul 22, 2023Exploit / PoC in the wildCVE-2023-3519CVE-2023-3466CVE-2023-3467+3 CVEs60
Citrix Devices Under Attack: NetScaler Flaw Exploited to Capture User CredentialsThe Hacker News·Oct 10, 05:52 UTC · Oct 10, 2023VulnerabilityCVE-2023-3519CVE-2023-4520860
New Ransomware Campaign Targets Citrix NetScaler FlawInfosecurity Magazine·Aug 29, 16:30 UTC · Aug 29, 2023RansomwareCVE-2023-351960
Hundreds of Citrix NetScaler ADC and Gateway Servers Hacked in Major Cyber AttackThe Hacker News·Aug 8, 03:59 UTC · Aug 8, 2023Data breachCVE-2023-3519CVE-2023-2448960
Citrix warns of actively exploited zeroSecurity Affairs·Jul 21, 19:35 UTC · Jul 21, 2023Exploit / PoC in the wildCVE-2023-3519CVE-2023-3466CVE-2023-346760
Threat actors have been exploiting CVE-2023-4966 in Citrix NetScaler ADC/Gateway devices since AugustSecurity Affairs·Oct 18, 13:56 UTC · Oct 18, 2023Vulnerability in the wildCVE-2023-4966CVE-2023-351960
Hundreds of Citrix Endpoints Compromised With WebshellsInfosecurity Magazine·Aug 3, 10:00 UTC · Aug 3, 2023Exploit / PoCCVE-2023-3519CVE-2023-3466CVE-2023-346760
It’s a hot 0-day summer for Apple, Google, and Microsoft security fixesArs Technica · Security·Aug 1, 17:55 UTC · Aug 1, 2023Exploit / PoCCVE-2023-37450CVE-2023-36884CVE-2023-32046+18 CVEs60
Thousands of Citrix Servers Exposed to ZeroInfosecurity Magazine·Jul 24, 10:00 UTC · Jul 24, 2023Exploit / PoCCVE-2023-3519CVE-2023-3466CVE-2023-346760
INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023The Hacker News·Jun 18, 14:12 UTC · Jun 18, 2026RansomwareCVE-2023-3519CVE-2025-5777CVE-2023-48788+1 CVEs160
Chinese Hackers Murky, Genesis, and Glacial Panda Escalate Cloud and Telecom EspionageThe Hacker News·Feb 24, 14:01 UTC · Feb 24, 2026Threat actorCVE-2023-3519CVE-2025-3928CVE-2016-5195+1 CVEs60
China-linked Silk Typhoon APT targets North AmericaSecurity Affairs·Aug 23, 08:34 UTC · Aug 23, 2025Exploit / PoCCVE-2023-351960
CrowdStrike warns of uptick in Silk Typhoon attacks this summerCyberScoop·Aug 22, 16:39 UTC · Aug 22, 2025Exploit / PoC in the wildCVE-2023-3519CVE-2025-392860
China-linked Murky Panda targets and moves laterally through cloud servicesHelp Net Security·Aug 22, 00:00 UTC · Aug 22, 2025Exploit / PoCCVE-2023-3519CVE-2025-392860
China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial AccessThe Hacker News·Mar 7, 04:04 UTC · Mar 7, 2025Data breach in the wildCVE-2025-0282CVE-2024-3400CVE-2023-3519+5 CVEs60
What 2024 taught us about security vulnerabiltiesHelp Net Security·Jan 14, 00:00 UTC · Jan 14, 2025Exploit / PoC in the wildCVE-2023-3519CVE-2023-20198CVE-2021-4422860
China-linked APT group MirrorFace targets JapanSecurity Affairs·Jan 10, 08:24 UTC · Jan 10, 2025Threat actorCVE-2023-28461CVE-2023-27997CVE-2023-351960
THN Recap: Top Cybersecurity Threats, Tools, and Practices (Nov 11The Hacker News·Nov 18, 11:36 UTC · Nov 18, 2024Ransomware in the wildCVE-2024-5910CVE-2024-9463CVE-2024-9465+29 CVEs60
Zero-days dominate top frequently exploited vulnerabilitiesHelp Net Security·Nov 14, 00:00 UTC · Nov 14, 2024Vulnerability in the wildCVE-2023-3519CVE-2023-20198CVE-2021-44228+1 CVEs60
Surge in exploits of zero-day vulnerabilities is ‘new normal’ warns Five Eyes allianceThe Record·Nov 12, 16:08 UTC · Nov 12, 2024Exploit / PoCCVE-2023-351960
RansomHub Ransomware Group Targets 210 Victims Across Critical SectorsThe Hacker News·Sep 3, 12:52 UTC · Sep 3, 2024RansomwareCVE-2023-46604CVE-2023-22515CVE-2023-3519+3 CVEs60
U.S. Agencies Warn of Iranian Hacking Group's Ongoing Ransomware AttacksThe Hacker News·Aug 30, 05:50 UTC · Aug 30, 2024RansomwareCVE-2019-19781CVE-2022-1388CVE-2023-3519+2 CVEs60
FBI: Iran working with ransomware gangs for attacks in US, Azerbaijan, UAE and IsraelThe Record·Aug 28, 16:00 UTC · Aug 28, 2024RansomwareCVE-2024-24919CVE-2024-3400CVE-2022-1388+2 CVEs60
ExCobalt Cybercrime group targets Russian organizations in multiple sectorsSecurity Affairs·Jun 24, 07:39 UTC · Jun 24, 2024Data breachCVE-2022-2586CVE-2021-3156CVE-2021-4034+6 CVEs160
Citrix, VMware, and Atlassian Hit with Critical Flaws — Patch ASAP!The Hacker News·Jan 17, 04:23 UTC · Jan 17, 2024Vulnerability in the wildCVE-2023-6548CVE-2023-6549CVE-2023-3519+3 CVEs60
After ransomware claims, Xerox says subsidiary hit with cyberattackThe Record·Jan 2, 14:48 UTC · Jan 2, 2024RansomwareCVE-2023-351960
PC malware statistics, Q3 2023Kaspersky Securelist·Dec 1, 10:00 UTC · Dec 1, 2023Malware in the wildCVE-2023-3519CVE-2023-20269CVE-2023-27532+3 CVEs60