> TritonInfoSec News
Home / Sep 30, 2026 / Story
0
#1 BleepingComputer general September 29, 2026 at 18:37 UTC

Hackers exploit Citrix NetScaler zero-day to deploy web shells

By Lawrence Abrams

AI Summary

Attackers exploited Citrix NetScaler zero-day CVE-2026-88772 to deploy custom web shells and tunneling malware, gaining root access, stealing credentials, and pivoting into internal networks. Mandiant attributed the campaign to advanced, suspected state-sponsored threat actors who operated undetected for at least three weeks across dozens of organizations. US and UK cybersecurity agencies issued joint advisories confirming the exploitation, with Citrix patching eight new vulnerabilities total.

Read full article → https://www.bleepingcomputer.com/news/security/hac…

Relevance score: 92.0/100

# More from September 30

  1. 2
    Apple patches CoreGraphics zero-day flaw exploited in attacks BleepingComputer
  2. 3
    New Spectre v2 attack variant leaks Linux root password hash in minutes BleepingComputer
  3. 4
    French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks The Hacker News
  4. 5
    Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor The Hacker News
  5. 6
    FBI tells ShinyHunters members to turn themselves in after recent arrest BleepingComputer
  6. 7
    Pentagon Personnel Agency Data Breach Impacts 3 Million People SecurityWeek
  7. 8
    JadePuffer agentic AI attacks target Azure, destroy cloud resources BleepingComputer
  8. 9
    Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials The Hacker News
  9. 10
    Misconfigured Supabase apps expose data in over 16,000 databases BleepingComputer