thumbnail Xfinity waited to patch critical Citrix Bleed 0-day. Now it’s paying the price