Two questions remain: who is abusing the CVEs? And why did Citrix take so long to disclose?
Read the full article on The Register →