Comcast to Pay $117M in Security Breach Settlement

Comcast has agreed to a preliminary $117.5M settlement over a large late-2023 breach tied to the CitrixBleed flaw that may have exposed data for over 31 million people; the report details how the vulnerability and updated exploits allow session-token hijacking (including persistent API/application sessions), highlights additional Comcast and third-party breaches, and warns of ongoing telecom-sector threats from groups like Salt Typhoon and Crimson Collective.