Pope CitrixBleed I

Encyclical

"Sessio Cruenta". NetScaler ADC and Gateway leaked session tokens from memory, and with those you walked in past passwords and MFA. LockBit and others used it against large companies and banks, and many learned that updating was not enough: stolen sessions stayed valid until they were killed by hand. The year taught that patching is followed by cleanup, and that the perimeter itself has become the target.

Saint page: Saint Citrix Bleed, Who Leaked the Session Tokens

Cardinals

Saint Rapid Reset, Who Asked and Instantly Cancelled · Saint Looney Tunables, Who Tunes Environment Variables