Two critical NetScaler zero-days had been exploited for weeks before Citrix patched on 27 September; the technique, the attack chain and the pattern of almost annual NetScaler incidents show why this is more than "just another VPN bug".
Read the article →