CISA warns that hackers are actively exploiting a critical 'Citrix Bleed 2' security flaw in Citrix NetScaler.
The bug allows hackers to remotely extract sensitive credentials from an affected NetScaler device, potentially gaining broader access to a company's network.
CISA has evidence of active exploitation and ordered federal government agencies to patch affected Citrix devices within a day due to the significant risk posed.
Citrix has not acknowledged the exploitation but advises customers to update affected devices promptly.