Suspected State Hackers Exploited Citrix NetScaler for Weeks 50000 Devices May Still Be Exposed

Datawater reports Two critical NetScaler zerodays CVE202688771 and CVE202688772 were used against organizations worldwide before a patch existed CISAs deadline is today Patching alone will not tell you whether you were already breached Threat level Critical What Two unauthenticated remotecodeexecution flaws in Citrix NetScaler ADC and NetScaler Gateway both CVSS 95 Status Exploited as zerodays Source