Cybersecurity incident
Date: 2023-11-24 00:00:00
Affected organization: CTS
Affected country: United Kingdom of Great Britain and Northern Ireland
Industry: Professional, Scientific, and Technical Services
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Financial
Actor: cl0p
Actor type: Criminal
Actor country: Russian Federation
Description: CTS, a U.K.-based provider of managed IT services for law firms and the professional services industry, experiences a cybersecurity incident that is causing ongoing widespread disruption across the legal sector. Fingers are pointed to the Clop ransomware gang exploiting the CVE-2023-4966 CitrixBleed vulnerability.