Hackers Can Go From CitrixBleed 2 Exploitation to Ransomware in Under an Hour

Repeatable seven-stage playbook Jan-Jun 2026. PsExec, Impacket, Mimikatz lateral movement. Empty login POST to doAuthentication endpoint leaks ~127 bytes adjacent memory per request.