Chinese government-backed hackers exploiting bug in Citrix products, says US NSA

Chinese government-backed hackers are exploiting a zero-day vulnerability in two widely used Citrix networking products to gain access to systems, the US government has warned.

According to the National Security Agency (NSA), the vulnerability allows hackers to remotely run malicious code on vulnerable devices — no passwords needed.

The desktop virtualisation company also admitted the bug is being actively exploited by threat actors.