The vulnerability impacts Citrix NetScaler ADC and Gateway systems.
Thousands of organisations have been subjected to over 11.5 million attempted attacks involving the critical CitrixBleed 2 vulnerability.
Tracked as CVE-2025-5777, the vulnerability impacts Citrix NetScaler ADC and Gateway systems, according to CyberScoop, with organisations in the financial services sector targeted by 40 percent of the attack attempts.
A report from Imperva researchers revealed that intrusions exploiting the flaw were observed by GreyNoise to have originated from 22 unique malicious IPs, half of which were discovered on Friday alone.
Written by
Dan Raywood is a B2B journalist with 25 years of experience, including covering cybersecurity for the past 17 years. He has extensively covered topics from Advanced Persistent Threats and nation-state hackers to major data breaches and regulatory changes.
He has spoken at events including 44CON, Infosecurity Europe, RANT Forum, BSides Scotland, Steelcon and the National Cyber Security Show, and served as editor of SC Media UK, Infosecurity Magazine and IT Security Guru. He was also an analyst with 451 Research and a product marketing lead at Tenable.