VULNERABILITYCyberScoop
Citrix security flaw
Researchers said the first known attack by Armory Castle, also known as UNC5221, occurred almost seven weeks ago. The threat group previously compromised Ivanti and Citrix customers.
Sources
- CyberScoop · 16-Oct-2026