{"uuid": "b3d972f9-6bad-4e17-b1f3-23888860455f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-5777", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43290", "content": "Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials\n\nThreat actors associated with the Anubis ransomware operation have been observed exploiting the Citrix Bleed 2 (CVE-2025-5777) vulnerability to obtain initial access.\n\n\"Although tactics differ between affiliates, common patterns emerged in tradecraft through use of legitimate Remote Management and Monitoring (RMM) tooling, credential access, and hands-on-keyboard procedures used for lateral\nhttps://thehackernews.com/2026/07/ransomware-groups-turn-to-citrix-bleed.html", "creation_timestamp": "2026-09-18T05:00:04.791620Z"}