{"id":1213487,"date":"2023-12-19T18:14:40","date_gmt":"2023-12-19T23:14:40","guid":{"rendered":"https:\/\/www.prime-wow.com\/?p=1213487"},"modified":"2023-12-19T18:14:40","modified_gmt":"2023-12-19T23:14:40","slug":"xfinity-waited-13-days-to-patch-critical-citrix-bleed-0-day-now-its-paying-the-price","status":"publish","type":"post","link":"https:\/\/www.prime-wow.com\/?p=1213487","title":{"rendered":"Xfinity waited 13 days to patch critical Citrix Bleed 0-day. Now it\u2019s paying the price"},"content":{"rendered":"<div id=\"rss-wrap\">\n<figure class=\"intro-image intro-left\">\n  <img decoding=\"async\" src=\"https:\/\/www.prime-wow.com\/wp-content\/uploads\/2023\/12\/getty-comcast-truck-800x600-1.jpg\" alt=\"A parked Comcast service van with the \" \/><\/p>\n<p class=\"caption\" style=\"font-size:0.8em\"><a href=\"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2023\/02\/getty-comcast-truck.jpg\" class=\"enlarge-link\" data-height=\"1875\" data-width=\"2500\">Enlarge<\/a> <span class=\"sep\">\/<\/span> A Comcast Xfinity service van in San Ramon, California on February 25, 2020.  (credit: Getty Images | Smith Collection\/Gado )<\/p>\n<\/figure>\n<div><a name=\"page-1\" \/><\/div>\n<p>Comcast waited 13 days to patch its network against a high-severity vulnerability, a lapse that allowed hackers to make off with password data and other sensitive information belonging to 36 million Xfinity customers.<\/p>\n<p>The breach, which was carried out by exploiting a vulnerability in network hardware sold by Citrix, gave hackers access to usernames and cryptographically hashed passwords for 35.9 million Xfinity customers, the cable TV and Internet provider said in a <a href=\"https:\/\/apps.web.maine.gov\/online\/aeviewer\/ME\/40\/49e711c6-e27c-4340-867c-9a529ab3ca2c.shtml\">notification<\/a> filed Monday with the Maine attorney general\u2019s office. Citrix disclosed the vulnerability and issued a patch on October 10. Eight days later, researchers reported that the vulnerability, tracked as CVE-2023-4966 and by the name Citrix Bleed, had been under <a href=\"https:\/\/arstechnica.com\/security\/2023\/10\/the-latest-high-severity-citrix-vulnerability-under-attack-isnt-easy-to-fix\/\">active exploitation<\/a> since August. Comcast didn\u2019t patch its network until October 23, 13 days after a patch became available and five days after the report of the in-the-wild attacks exploiting it.<\/p>\n<p>\u201cHowever, we subsequently discovered that prior to mitigation, between October 16 and October 19, 2023, there was unauthorized access to some of our internal systems that we concluded was a result of this vulnerability,\u201d an <a href=\"https:\/\/apps.web.maine.gov\/online\/aeviewer\/ME\/40\/49e711c6-e27c-4340-867c-9a529ab3ca2c\/b2edd967-0331-4ac6-a37e-cc846cf50bb7\/document.html\">accompanying notice<\/a> stated. \u201cWe notified federal law enforcement and conducted an investigation into the nature and scope of the incident. On November 16, 2023, it was determined that information was likely acquired.\u201d<\/p>\n<\/div>\n<p><a href=\"https:\/\/arstechnica.com\/?p=1992160#p3\">Read 6 remaining paragraphs<\/a> | <a href=\"https:\/\/arstechnica.com\/?p=1992160&amp;comments=1\">Comments<\/a><\/p>\n<p>&#013;<br \/>\n&#013;<br \/>\nSource: Ars Technica &#8211; <a href=\"https:\/\/arstechnica.com\/?p=1992160\" target=\"_blank\" rel=\"noopener\">Xfinity waited 13 days to patch critical Citrix Bleed 0-day. Now it\u2019s paying the price<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Enlarge \/ A Comcast Xfinity service van in San Ramon, California on February 25, 2020. (credit: Getty Images | Smith Collection\/Gado ) Comcast waited 13 days to patch its network against a high-severity vulnerability, a lapse that allowed hackers to &hellip; <a href=\"https:\/\/www.prime-wow.com\/?p=1213487\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":1213488,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[27,110],"tags":[73],"class_list":["post-1213487","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ars-technica","category-unfiltered-rss","tag-ars-technica"],"_links":{"self":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1213487","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1213487"}],"version-history":[{"count":0,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1213487\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/media\/1213488"}],"wp:attachment":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1213487"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1213487"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1213487"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}