Millions of Comcast Xfinity subscribers’ personal data – including potentially their usernames, hashed passwords, contact details, and secret security question-answers – was likely stolen by one or more miscreants exploiting Citrix Bleed in October.
The internet, voice, and cable TV provider this week revealed it had fallen victim to the critical information disclosure bug. Citrix disclosed and patched the flaw in its NetScaler gateway appliances on October 10 before urging IT admins to apply the update and kill all active and persistent sessions using a series of commands three days later.
