Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway

The UK NCSC urges organisations to urgently mitigate vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway, noting that two vulnerabilities are being actively exploited. The broader feed also covers Iranian CHOSEN BRICK spyware targeting dissidents, activists and journalists; Russian state-linked campaigns targeting Western organisations and poorly configured routers; exposed edge and operational technology systems; and guidance on AI, recovery, resilience and post-quantum cryptography. The primary actionable risk is active exploitation of internet-facing Citrix appliances.