The shifting sands of the war against cyber extortion Ransomware and cyber extortion attacks aimed at organizations are not letting up. Occasionally, they even come in pairs. How LockBit used Citrix Bleed to breach Boeing and other targets CVE-2023-4966, aka "Citrix Bleed", has been exploited by LockBit 3.0 affiliates to breach Boeing's parts and distribution business, and "other trusted third parties have observed similar activity impacting their organization," cybersecurity and law enforcement officials have confirmed on Tuesday. Sophos Web Appliance vulnerability exploited in the wild (CVE-2023-1671) CISA has added three vulnerabilities to its Known Exploited Vulnerabilities catalog, among them a critical vulnerability (CVE-2023-1671) in Sophos Web Appliance that has been patched by the company in April 2023.