basicsecurity.net — editorial Cited, lab-proven stories from the known-exploited record. tag:basicsecurity.net,2026:/feed 2026-08-05T16:30:30Z basicsecurity.net A leak in the front door: how Citrix Bleed became a ransomware crew’s favorite way in https://basicsecurity.net/outcomes/story/cve-2023-4966/ 2026-08-05T16:30:30Z 2026-08-05T16:30:30Z An unauthenticated attacker reads valid session tokens straight out of a NetScaler appliance’s memory — then logs in as your users, MFA and all. A named ransomware group industrialized it. Here is the whole path, with a source for every claim. Known, weaponised, and off the list: the 208 days CVE-2024-23897 waited for CISA's KEV https://basicsecurity.net/outcomes/story/cve-2024-23897/ 2026-08-04T02:07:12Z 2026-08-04T02:07:12Z A maximum-severity Jenkins flaw was public, exploited, and rated 'actively exploited' by CISA's own triage — yet it took 208 days to reach the government's authoritative Known Exploited Vulnerabilities catalog. A post-2021 measurement of a system its own maintainers say is behind.