Containing Threat Actors at the Edge
Citrix, Tuesday, August 4th, 2026
Citrix reports edge devices and VPNs rose from 3% to 22% of vulnerability exploitation actions.
Eric Beiers of Citrix's Section 1494 team examines escalating attacks on internet-facing infrastructure, including Citrix NetScaler devices, by sophisticated state-aligned adversaries.
He cites data showing 22% of vulnerability exploitation actions targeted edge devices and VPNs, up sharply from 3% in the previous period. The shift reflects attackers concentrating on the devices that sit at the network boundary with broad internal reach.
The post covers how defenders can contain threat actors at that edge.