Citrix NetScaler exploitation began days before public notification

Customers need to check systems for compromise prior to patching, because the security upgrade may not fully resolve an infected system.