Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials

Cybercriminals linked to the Anubis ransomware group have started exploiting the Citrix Bleed 2 vulnerability (CVE-2025-5777) to gain unauthorized access to networks. These attacks highlight the ongoing risk of supply chain vulnerabilities and the importance of securing credentials. The use of legitimate remote monitoring tools in these attacks underscores the evolving tactics of ransomware groups, making it crucial for organizations to bolster their cybersecurity measures. This trend is alarming as it demonstrates how attackers are increasingly leveraging network weaknesses to infiltrate and compromise sensitive data.