Boeing Hack Targeted Flaw With Citrix System, Investigators Say

Hackers targeting a Boeing Co. subsidiary took advantage of a flaw with Citrix Systems Inc. software that had gone unnoticed and unfixed for weeks, a government advisory said Tuesday.

That flaw, dubbed Citrix Bleed, had been exploited by hackers in secret before a fix was issued last month, according to Citrix online posts and cybersecurity researchers.

The ransomware group LockBit 3.0 used it to target Boeing and other companies, according to the advisory, which was issued by the US Cybersecurity and Infrastructure Security Agency, the FBI and the Australian Cyber Security Centre among others. It described the terms, tactics and ...