Signalis
sign in--:--:--UTC
CVEs

CVE-2025-5777

exploited in the wild☆ pin
CVSS
9.3
Reports
6
First seen
Apr 16, 2026
Last seen
Aug 3, 2026
Affected product

Citrix NetScaler

Associated actors

DragonForce ×3Helix ×2CitrixBleed 2 IAB Cluster ×1CyberArmy of Russia Reborn ×1ExfilSquad ×1GigaWiper operator ×1GOLD ENCOUNTER ×1INC Ransom ×1IronWorm ×1JADEPUFFER ×1Kratos ×1O-UNC-066 ×1Rare Werewolf ×1Scattered Spider ×1SHELLSTORM ×1TeamPCP ×1TencShell ×1The Com ×1The Gentlemen ×1Turla ×1

Recent reports

High

Cyber Brief July 2026 – EU Threat Intelligence Summary

CERT-EU Threat IntelHigh

Weekly Security Recap: ShareFile Threats, Citrix Bleed 2 Ransomware, Supply Chain Attacks

The Hacker NewsCritical

CitrixBleed 2 (CVE-2025-5777): IAB Weaponizes Memory Bleed for Dragonforce Ransomware Deployment

Huntress BlogCritical

Ransomware Groups Exploit Citrix Bleed 2, BYOVD Techniques, and Supply Chain Credentials

The Hacker NewsHigh

INC Ransomware Emerges as Major RaaS Threat with 830+ Victims Since 2023

The Hacker NewsHigh

QEMU abused to evade detection and enable ransomware delivery

Sophos News

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans